su to oracle without password

[ITSD-ACCS]

Hi,

I want to su oracle as user A, but it prompts me password when I run in batch program. Can anyone suggest a way to do it, say granting privileges or permission ?

Thanks.

[Slawomir Gora]

Hi,

you can install and use sudo package
http://hpux.cs.utah.edu/hppd/hpux/Sysadmin/sudo-1.6.8p7/

[Devender Khatana]

Hi,

If your user is having root previlages or the job is run as root, you will be never prompted for passwd for any user.

Another option could be that you set UID on your batch program so that it is always executed with root previlages not causing the prompt.

Another way of executing this as root will be to use sudo.

HTH,
Devender

[Pete Randall]

Sure - change the owner of the batch program to be root and the group to be user A's group. Then turn on the setuid bit.

chown root:userAgroup /batchprogram
chmod u+s /batchprogram

Be aware that having setuid programs is considered a security risk.


Pete

[Muthukumar_5]

You can try with telnet on this as,

(
sleep 1;
printf "oracle\n";
sleep 2;
printf "\n";
sleep 1
printf "/tmp/batchfile\n";
sleep 1
printf "exit";
) | telnet localhost

where /tmp/batchfile is with execution permission.
hth.

[H.Merijn Brand (procura]

Use ssh, and add the caller's id.pub to oracle's ~/.ssh/authorized_keys

Be carefull to check the folders chmod values

~oracle: 0755
~oracle/.ssh: 0700
~oracle/.ssh/authorized_keys: 0600

oracle# cd ~/.ssh
oracle# ln authorized_keys authorized_keys2

root# cat ~end_user/.ssh/id.pub >>~oracle/.ssh/authorized_keys

end_user# ssh oracle@localmachine your_command

No password needed

EŠjøÿ, Håve Fà à ¡ Ħ.MeŠıjŠ[ hav

[Gopi Sekar]

if you want to really automate this process without granting privileges then you can do so by using 'expect' script.

check man page of expect to find more details on this.

Regards,
Gopi

[C. Beerse_1]

You could use the rsh/rlogin/rexec route: In the oracle-account create a ~/.rhosts account with the other accountname and 'localhost' for hostname (see `man rhosts` for details). Now from the other account, use `rsh localhost -l oracle` (or rexec, rlogin) to start the process. The advantage here is that it sets both the real-ids and the effective-ids.

You can also peek at the packages named `sudo` or `super` at http://hpux.its.tudelft.nl/. They are designed for this purpose.

However, the origional way to do this is to use the sticky-bit: `chmod u+s binary`. Details are explained in most unix adminsitrators books.