recommendations for a good setuid program

[Ken Penland_1]

I have been tasked to find software that will allow users to run scripts as root or any other user without having to become that user first. I know about "sudo" already, but where I work opensource products are not desired, the general belief is the more money spent, the better the product. Does anyone have any suggestions for a product that will work on HPUX 11.00 and 11.11 that allows the admin to set it up so that certain users can run certain scripts as root or another uid?

Any advice would be appreciated.

Ken

[Patrick Wallek · Accepted solution]

Have a look at the software called PowerBroker from Symark.

http://www.symark.com/

PB has excellent logging and will do exactly what you require. It is fairly pricey though, but that sounds like that may be good in your environment.

[Ken Penland_1]

yeah, I actually had a demo of that product a few years back...looks pretty good...any others that you have had good experiences with that I might be able to compare to?

[Ken Penland_1]

I also seem to recall that powerbroker had a problem working correctly on a Trusted system, does anyone know if this has been corrected?

[Chris Vail]

We're using powerbroker here. I hate it, but that is probably an implementation issue rather than something with the application itself. Our systems were cobbled together after a major merger, and there are as many exceptions as there are rules.

Sudo is a better product, and less intrusive AFAIC. Combined with ssh you'd have a pretty good system.

Chris

[TwoProc]

I vote for sudo. Easy enough to put together and implement. Price is right... Free - go look at the porting archive site (search google for "hpux porting archive") to get a version ready to run on HPUX.

[Ken Penland_1]

thanks all for your input, I am leaning tward sudo, but have to leave it up to the powers that be.