|
|
Sponsored Content
Operating Systems
HP-UX
RBAC question
Post 302370418 by maxim42 on Wednesday 11th of November 2009 09:46:27 AM
11-11-2009
RBAC question
hi every one i tried rbac and i made
1- role called GizaRoot
2- group called gizagroup
3- added privlage autherization called "m.k"
/usr/sbin/useradd:dflt
m.k,*):0/0//:dflt:dflt:dflt:
i assigned the role to group and add user to that group then su to user and tried to use the command
privrun useradd maxim it worked and every thing ok but i don't under stand why it uses the euid=0 and ruid=0 and i assigned only to group not user i tried to make the line like this /usr/sbin/useradd:dfltm.k,*)://107/0:dflt:dflt:dflt:
but it didn't work so i want one to explain to understand and thanks
1- role called GizaRoot
2- group called gizagroup
3- added privlage autherization called "m.k"
/usr/sbin/useradd:dflt
m.k,*):0/0//:dflt:dflt:dflt:i assigned the role to group and add user to that group then su to user and tried to use the command
privrun useradd maxim it worked and every thing ok but i don't under stand why it uses the euid=0 and ruid=0 and i assigned only to group not user i tried to make the line like this /usr/sbin/useradd:dflt
m.k,*)://107/0:dflt:dflt:dflt:but it didn't work so i want one to explain to understand and thanks
|
|
10 More Discussions You Might Find Interesting
1. UNIX for Advanced & Expert Users
Hi gurus:
I have not come accross any links on the internet that shows how to set up logging in RBAC and also is it possible to get the granularity and simplicity of sudo logging in RBAC. I have heard that RBAC logs are complicated to read and not as simple and granular as sudo logs.
Your help... (0 Replies)
Discussion started by: geomonap
0 Replies
2. Solaris
I am trying to let user asillitoe su to the godbrook role to execute commands. I have editted files as follows:
user_attr:
asillito::::type=normal;roles=godbrook
godbrook::::type=role;profiles=Gadbrook,All
prof_attr:
Gadbrook:::Allow root commands to be used by godbrook:
exec_attr:... (0 Replies)
Discussion started by: chrisdberry
0 Replies
3. Solaris
do i have to create a new account to add a role?
i want the sysadmin login
i have 3 users on my systems
sysadmin
secman
oc01
also 3 profiles
SA (goes t0 sysadmin account)
SSO (goes to secman account)
LMICS (goes to oc01 account)
the user accounts are located in /h/USERS/local
the... (4 Replies)
Discussion started by: deaconf19
4 Replies
4. Shell Programming and Scripting
what would be easier to automate a script if/then ? (0 Replies)
Discussion started by: deaconf19
0 Replies
5. AIX
I would like to use the Role Based access control to granulize some of the administration of AIX systems in our organization. Across the company we will be using aix 5.3. One of these roles will only have the access to make, change and delete users, something similar to ManageAllUsers. The thing... (1 Reply)
Discussion started by: dgaixsysadm
1 Replies
6. UNIX for Dummies Questions & Answers
Can anyone help me on "How to change Unix to support RBAC policy"? (4 Replies)
Discussion started by: JPoroo
4 Replies
7. Linux
Hi all,
What the difference between the sudo users & RBAC when the talk of effects after doing the above comes???
any differences between them ,kindly list ?? (1 Reply)
Discussion started by: saurabh84g
1 Replies
8. Solaris
Hi all!
On backup server with contab my script worked, but one command don't fine to be executed:
bash-3.00$ scp itadmin@172.17.0.44:/export/backups/* /bckp1/opencms/bcp_`date +%Y%m%d`/
www-zone.cfg 100%... (0 Replies)
Discussion started by: sotich82
0 Replies
9. Solaris
I am referring Bill Calkins(SCSA exam prep) for RBAC..actually i wanted to make a normal user to get the privilege to run a command through authorization, not through profile files...
This is the exact steps given by Bill calkins..
1.roleadd -m -d /export/home/adminusr -c... (11 Replies)
Discussion started by: saagar
11 Replies
10. AIX
Hello everyone, I am having trouble with something, and I can't find the right answer online. On our company, we are using LDAP Authentication with Active Directory (Windows 2008 Servers) to have a centralized management of AIX 7.1 users.
So far so good, but now, we want to implement RBAC on... (7 Replies)
Discussion started by: Janpol
7 Replies
LEARN ABOUT SUNOS
groupdel
groupdel(1M) System Administration Commands groupdel(1M) NAME
groupdel - delete a group definition from the system SYNOPSIS
/usr/sbin/groupdel group DESCRIPTION
The groupdel utility deletes a group definition from the system. It deletes the appropriate entry from the /etc/group file. OPERANDS
group An existing group name to be deleted. EXIT STATUS
The following exit values are returned: 0 Success. 2 Invalid command syntax. A usage message for the groupdel command is displayed. 6 group does not exist. 10 Cannot update the /etc/group file. FILES
/etc/group system file containing group definitions ATTRIBUTES
See attributes(5) for descriptions of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +-----------------------------+-----------------------------+ |Availability |SUNWcsu | +-----------------------------+-----------------------------+ SEE ALSO
users(1B), groupadd(1M), groupmod(1M), logins(1M), useradd(1M), userdel(1M), usermod(1M), attributes(5) NOTES
The groupdel utility only deletes a group definition that is in the local /etc/group file. If a network nameservice such as NIS or NIS+ is being used to supplement the local /etc/group file with additional entries, groupdel cannot change information supplied by the network nameservice. SunOS 5.10 14 Sep 1992 groupdel(1M)