Su and different users

[Alice Seeley]

I need to implement controlling which accounts can su (switch user) to other accounts. For example user1 can su to user2 but cannot su to user3 and user3 can only su to user1. Is there somewhere I can read about this? Thanks in advance.

[Jonathan Fife]

That would be implementable using sudo.

See http://www.courtesan.com/sudo/man/sudoers.html

for the sudo config file (sudoers) syntax and examples.

Sudo is available from HP's Internet Express bundle
(http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1111 for 11.11 and http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1123 for 11.23)

[Yang Qin_1]

Hi, if you meant su to the other user without type the password for the other user, then you may try sudo. Otherwise, you can just share user2's password with user1 and share user1's password with user3.

Yang

[Mel Burslan]

as the previous two posts mentioned, what you need on the free side is the sudo package, which is available directly from any of the HPUX software porting centers, one of which is in University of UTAH and here is the direct link to the sudo application there:

http://hpux.cs.utah.edu/hppd/hpux/Sysadmin/sudo-1.6.8p9/

or if you are talking about some sort of "heavy" accountability to entities like SEC and such, as well as your organization doesn't mind spending some money on the accountability end of the things, you should consider powerbroker from Symark. Information can be found here:

http://www.symark.com/powerbroker.htm

Hope this helps.