Role Based Access Control

[Jesus Tobon]

In Sun Solaris there is a way to create root equivalents. This can be done using Role Based Access Control (RBAC). I'm trying to set up a user in HP-UX with a kind of group administrator role (In order to change attributes to files and directories, and other small things). There is any RBAC thing in HP-UX?
Or there is any other way to accomplish this task???

[Patrick Wallek]

Nope, No Role Based stuff in HP-UX. As far as I know, that is purely a Solaris 8 thing.

The closest thing I can think of is set up sudo (free) or PowerBroker ($$$$ from Symark) so that the various users can do what they need to do without actually logging in as root.

[Bernie Vande Griend]

HP has nothing built in to do this.

Sudo is an freeware option.
Symark's PowerBroker is a pretty decent way to do this as it doesn't change the kernel in order to operate.
Computer Associate's has a product called Access Control which also does this exact thing. It is not cheap though and does integrate with the kernel. In fact, that product even allows you to change the access for the root user itself.

[Sanjay_6]

Hi,

Like Patrick said, you can use sudo or powerbroker. If you only want the user to change file permissions and such. add the user to all the group of users for whom you want to allow this capability.

Am i making sense.

hope this helps.

Regds

[harry d brown jr]

Write a perl script. It insures you give them what they need while protecting your system.

live free or die
harry

[Michael Tully]

Hi,

Your best bet is get 'sudo' which the best
part of it is that is free. It is really
simple to use and setup.

http://hpux.connect.org.uk/hppd/hpux/Sysadmin/sudo-1.6.2b1/

Or you can get the source code from

www.courtesan.com/sudo

HTH
-Michael

[harry d brown jr]

Or you can get brave and turn on ACL's. But you'll hpux 11 or greater, with jfs 3.3.

live free or die
harry

[Edward Finneran]

or, if the function you're trying to delegate is one provided by sam, you can use sam functions to allow a designated set of non-root users access to that specific function or functions only via sam.