root privilege

[kacou]

i want to give the root privileges to a user 'toto'. How can i configure it?

i need your help please

[Yashwant · Accepted solution]

Sudo is good option.


Install sudo first from http://www.gratisoft.us/sudo/intro.html



do "visudo". I have given basic configuration to assigh user 'toto' on machine "HP" to run "su - root" command

Host_Alias SMS=HP

User_Alias SUSER=toto

Runas_Alias ADM = root, !root*


Cmnd_Alias SUROOT=/usr/bin/su -, /usr/bin/su - root

SUSER SMS=(ALL) NOPASSWD: SUROOT

[Mel Burslan]

As suggested above, sudo is the good-enough and free solution. But if you will need any sort of sccountability (for audit purposes and more) you need to look into Symark's PowerBroker application. It is not cheap by any means but does the job perfectly well.

http://www.symark.com

then follow the navigation to PowerBroker product.

Hope this helps

[Pete Randall]

You could also look into using restricted SAM (sam -r), wherein you set the user up as a restricted SAM user who has access to selected SAM functions.


Pete

[Patrick Wallek]

If you are on 11iv2 (11.23) or 11iv3 (11.31) the Role Based Access Control (RBAC) may be an option as well.

http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=AccessControl

[Sp4admin]

I agree with the postings above. I wouldn't give root privileges to a user. I would use sudo as stated and just allow the user certain root commands.

sp,