Security user Can't change the groups. Post: 302315691

Sponsored Content

Operating Systems AIX Security user Can't change the groups. Post 302315691 by ITHelper on Wednesday 13th of May 2009 04:18:55 AM

05-13-2009

ITHelper

Guest

Security user Can't change the groups.

Dears

Security users in AIX don’t have permission to change the group of the user thru Smitty Users

When they try to change the group of the users to any group they'll get permission denied

Security profile in Smitty :

[TOP] [Entry Fields]
User NAME...................................................securityuser
User ID.......................................................[205]
ADMINISTRATIVE USER?...............................false
Primary GROUP............................................[security]
Group SET..................................................[security,staff]
ADMINISTRATIVE GROUPS...........................[]
ROLES.......................................................[]
Another user can SU TO USER?......................true
SU GROUPS................................................[ALL]
HOME directory.......................................... [/home/securityuser]
Initial PROGRAM..........................................[/usr/bin/ksh]
User INFORMATION...................................[securityuser]
EXPIRATION date (MMDDhhmmyy)................[0]

Error message when security user try to change the group for any user !!

============================================================

Command: failed stdout: yes stderr: no

Before command completion, additional instructions may appear below.
3004-692 Error changing "groups" to "sys" : You do not have permission.

============================================================

We are on AIX 5.3

Dears

Can you please advice us in this regard and what's the solution of this issue ?

Last edited by ITHelper; 05-23-2009 at 12:11 PM..

ITHelper

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

dynamic user groups

Is it possible to dynamically allocate a new user group to an existing session on Solaris 5.8 I'd like to be able to allow certain users to access a set of scripts for the life of session (preferably there own session not a specific login created for the purpose) by dynamically giving the session...

2. UNIX for Dummies Questions & Answers

Adding user to groups

How do I add a user to a group? And how do I determine the list of groups to add a user? Solaris 10 newbie

3. UNIX for Dummies Questions & Answers

User groups

Hi I have a user zak and 4 groups:- oracle stats data archive I want user zak to be part of the oracle and stats group but not be able to view,list anything in data and archive. Also anyone in the data and archive group should not be able to view,list anything in oracle and stats.......

4. UNIX for Advanced & Expert Users

How to remove UNIX user and groups

I created UNIX groups - oinstall, dba and UNIX user - oracle for the installation of Oracle 10g. But I might did something incorrectly. Oracle user account didn't created properly. How to remove these UNIX groups and user so that I can start over again to create them properly. Thanks.

5. Solaris

Setting user groups

Hi......... I'm trying to set a group of users to login to do a required super-user tasks without knowing the super-user passwd. For example...a user popodude logs in as self with passwd..system accepts the password & then automatically asks for the super-user account passwd. My goal is...

6. AIX

user & groups

1 - what is the maximum no: of groups a user can be a part of ? 2 - what is maximum no: of users a group can contain ?

7. UNIX for Dummies Questions & Answers

How to add user to multiple groups

hi all i am new to solaris how to add a user to multiple(secondary) groups. user :anna Groups : delhi ,mumbai,pune i need like this in cat /etc/group delhi::anna mumbai::anna pune::anna i tried using usermod -a -G hyd anna that does int work how to delete user from group...

8. AIX

Nested user groups

Is there a command to nest a group in another group in AIX.

9. UNIX for Advanced & Expert Users

How to get User list from different groups and root?

Hi all, I want to list out users from different group and root, who are roaming in our group or root as a user. how can i list out this users ?

10. HP-UX

Creating user groups that are persistent

Hi, I need to modify the user 'munfai' by adding it into groups bscs, oinstall, dba. I use this command as user root to add the user into the mentioned groups : # usermod -G bscs,oinstall,dba munfai I can thereafter see the id in the groups : # id munfai uid=258(munfai) gid=20(users)...

LEARN ABOUT CENTOS

sss_usermod

SSS_USERMOD(8)							 SSSD Manual pages						    SSS_USERMOD(8)

NAME

       sss_usermod - modify a user account

SYNOPSIS

       sss_usermod [options] LOGIN

DESCRIPTION

       sss_usermod modifies the account specified by LOGIN to reflect the changes that are specified on the command line.

OPTIONS

       -c,--gecos COMMENT
	   Any text string describing the user. Often used as the field for the user's full name.

       -h,--home HOME_DIR
	   The home directory of the user account.

       -s,--shell SHELL
	   The user's login shell.

       -a,--append-group GROUPS
	   Append this user to groups specified by the GROUPS parameter. The GROUPS parameter is a comma separated list of group names.

       -r,--remove-group GROUPS
	   Remove this user from groups specified by the GROUPS parameter.

       -l,--lock
	   Lock the user account. The user won't be able to log in.

       -u,--unlock
	   Unlock the user account.

       -Z,--selinux-user SELINUX_USER
	   The SELinux user for the user's login.

       -?,--help
	   Display help message and exit.

THE LOCAL DOMAIN

       In order to function correctly, a domain with "id_provider=local" must be created and the SSSD must be running.

       The administrator might want to use the SSSD local users instead of traditional UNIX users in cases where the group nesting (see
       sss_groupadd(8)) is needed. The local users are also useful for testing and development of the SSSD without having to deploy a full remote
       server. The sss_user* and sss_group* tools use a local LDB storage to store users and groups.

SEE ALSO

       sssd(8), sssd.conf(5), sssd-ldap(5), sssd-krb5(5), sssd-simple(5), sssd-ipa(5), sssd-ad(5), sssd-sudo(5),sss_cache(8), sss_debuglevel(8),
       sss_groupadd(8), sss_groupdel(8), sss_groupshow(8), sss_groupmod(8), sss_useradd(8), sss_userdel(8), sss_usermod(8), sss_obfuscate(8),
       sss_seed(8), sssd_krb5_locator_plugin(8), sss_ssh_authorizedkeys(8), sss_ssh_knownhostsproxy(8),pam_sss(8).

AUTHORS

       The SSSD upstream - http://fedorahosted.org/sssd

SSSD
								    06/17/2014							    SSS_USERMOD(8)

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

dynamic user groups

Discussion started by: hammer

2. UNIX for Dummies Questions & Answers

Adding user to groups

Discussion started by: peteythapitbull

3. UNIX for Dummies Questions & Answers

User groups

Discussion started by: Zak

4. UNIX for Advanced & Expert Users

How to remove UNIX user and groups

Discussion started by: duke0001