Operating System - HP-UX
1834008 Members
1736 Online
110063 Solutions
New Discussion

SAM can't remove www user

 
SOLVED
Go to solution
YLTan
Frequent Advisor

SAM can't remove www user

Does anyone know why SAM can removed 'www' users. I checked there are no process runinng that are owned by 'www'. I got this msg from SAM when i try removing 'www' user, and manpages of sam(1m) doesn't explain why either;

SAM is not allowed to remove or deactivate user "www".

See the "sam(1M)" entry in the"HP-UX Reference" for details.
tyl
7 REPLIES 7
Ceesjan van Hattum
Esteemed Contributor

Re: SAM can't remove www user

Likely, you are using Restricted SAM mode, or you are an System Administrator, but not fully root.

A restricted SAM has the following rules you should know when using:

Cannot add user with UID 0
Cannot change the password of a user with the UID of 0
Cannot remove a user with the UID of 0
Cannot deactivate a user with UID of 0
Can change the home directory of a user with UID 0
Can create a new home directory for a user with UID 0
Can change the login shell or startup program for a user with UID 0

I hope this information will help.

Regards,
Ceesjan
Zeev Schultz
Honored Contributor

Re: SAM can't remove www user

use userdel or manual editing of /etc/password,etc/group (optional).
Could also be that you're in some of the directories owned by www user while running SAM?:)

Zeev
So computers don't think yet. At least not chess computers. - Seymour Cray
Darren Prior
Honored Contributor

Re: SAM can't remove www user

Hi,

Was there any more detail in the sam log that may shed some light? You should be able to tell which command or script was called to do the job - and then check it out.

regards,

Darren.
Calm down. It's only ones and zeros...
Cheryl Griffin
Honored Contributor

Re: SAM can't remove www user

I am in the process of confirming that the user www and webadmin (which belong to the other group) are used by Central Web Console and as such cannot be removed.

Check what software products are installed:
# swlist -l product
# swlist -l fileset
"Downtime is a Crime."
Michael Tully
Honored Contributor

Re: SAM can't remove www user

I've seen many systems where the 'www' user looks after things like apache. Double check that there are no processes running. As suggested by Darren, see what is observed in the sam viewer log. It may display some additional information that will help.

Regards
Michael
"When I have rouble spelling, it's called fat finger syndrome."
Anyone for a Mutiny ?
Cheryl Griffin
Honored Contributor

Re: SAM can't remove www user

Netscape Enterprise Server requires the user www.

http://www.docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B8313-90002/B8313-90002_top.html&con=/hpux/onlinedocs/B8313-90002/00/00/6-con.html&toc=/hpux/onlinedocs/B8313-90002/00/00/6-toc.html&searchterms=/etc/passwd%7cwww&queryid=20030604-055411

The entry in /etc/passwd is:
www:*:30:1::/:

# swlist -l fileset |grep -i netscape

If you remove the product first, you will then be able to remove the user.
"Downtime is a Crime."
Solution

Re: SAM can't remove www user

Hi, with SAM you can't remove www account, because it is protected... But, you can see /etc/sam/rmuser.excl file and remove its entry; then SAM will remove the www account.
DavidBC