Using SAM as a mortal user

[Mark Harshman_1]

Is there a way, i can set up SAM to give access to a mortal user to add users? Any info would be appreciated. I am running HPUX 11i on a variety of servers.

[James R. Ferguson · Accepted solution]

Hi Mark:

Yes, there is a "restricted" SAM. Run:

# sam -r

...as root to build it for the "mortals".

Regards!

...JRF...

[A. Clay Stephenson]

Yes. Do a "man sam" and search for "Restricted SAM" with the man pages. It will explain the process.

[Jeff_Traigle]

You can see if SAM in restricted mode will meet your needs. See sam(1M) regarding Restricted SAM.

For what it's worth, I found this to be not very secure, IMO. You can only restrict the people to areas of SAM, not really what they can do within those areas. Better off using sudo and wrapping a script for designated people to run that will issue the exact useradd command you want them to use. They can't change the behavior and it gets you consistent results.

[DCE]

Restricted sam can be configured to restrict specified ids to certain functions.

As root run sam -r to get into the configuration options.

The user runs sam, and will only see options you specify for his/her id.