Re-activate user ID

[TakHowe Chan]

Hi,

I would like to delegate some power users the ability to reactivate dormant user ID but without giving them the superuser's ID. Do anyone have any idea about this?

Thanks.

Our system:
RP7410
HP-UX 11.11i

[Anshumali · Accepted solution]

use restricted build of SAM
you can customer build sam for users using sam -r

[Robert-Jan Goossens]

Hi,

Install and configure sudo,and setup the passwd or the modprpw (trusted system) to enable user sctivation for the "power users".

http://hpux.connect.org.uk/hppd/hpux/Sysadmin/sudo-1.6.8p12/

Regards,
Robert-Jan

[TakHowe Chan]

Thanks, that really solved the problem.

[TakHowe Chan]

Hi,

I just realize it creates another problem when I use restricted SAM. What I did was to enable users to login to SAM with "Accounts for users and groups --> Users", but that will enable the users to add users. How can allow "Reset/Modify password" and "Reactivate" only?

Thanks.

[skt_skt]

modprpw with sudo will be good for reactivate.But giving accees to password reset/modification looks like a little risky, even though all the command logs are captured under sudo.

[Srinivas Thokala_1]

It is not a good idea to give this previleges to others of non root users.

Still if you want to and if sudo S/W is installed, then add line for that group in /sudo/etc/sudoers file as
/usr/lbin/modprpw
!/usr/bin/passwd root

The special charector '!' will not allow that group to change the root passwd.

-Srini

[TakHowe Chan]

Hi,

Actually I got the restricted SAM setup alright, so I thought is there any way to remove the ability to Add users in the restricted SAM and only allow them to release and reset password?

Thanks in advance.