su problem

[uadm26]

Hi,

I have a user backora and i need that user do su - oracle without asking for password. can you help?
Thanks.

[Rajeev Tyagi]

Joel,

You can use sudo to do that.

[Pete Randall · Accepted solution]

Joel,

Yes, sudo is your answer:

http://hpux.connect.org.uk/hppd/hpux/Sysadmin/sudo-1.6.8p6/


Pete

[uadm26]

How Rajeev

[RAC_1]

Install sudo and then set sudoers file (with visudo command)

backora (oracle) ALL= NOPASSWD "su - oracle"

Check man page for details.

[TheJuiceman]

If your company frowns on third party software on your system (like mine does), then you can also use restricted-SAM for this. Set backora up so that they are a SAM user (this can be done by running sam -r as root and then adding their ID in as instructed). Then create a Custom App that will execute "su - oracle" as root. Save the profile so that only her ID can run this script. When backora logs in and executes SAM, they can run the new script and it will su them as oracle without needing a password. When they exit out of "oracle", they will return to SAM as their own login.
Doing a "man sam" can help more.

Bob

[TheJuiceman]

PS - You could also use Service Control Manager also (but it is not built in to your system...you will have to get it from HP). Then backora could login as oracle from the command line without using a password.

[Mic V.]

If you're running an automated ("lights-out") backup script, you could add it to root's crontab (it wouldn't need a password:

0 9 * * 1 /bin/su - oracle -c "runbackupscript.sh"

(Check the syntax)

Mic