To my knowledge this is the only way it is possible.  I have done some
elaborate similar things.  The best thing is to do make the script
executable by a group and not readable because the userid and password will
be in there.  I have found however that dsmadmc requires root access because
of the ShMem access so we use sudo.  That secures it even further because
the person can be authorized only to execute the specific script.  I am sure
there are ways around the root access requirement for the shared memory.

Paul D. Seay, Jr.
Technical Specialist
Naptheon, INC
757-688-8180


-----Original Message-----
From: Eduardo Martinez [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 09, 2002 8:49 PM
To: [EMAIL PROTECTED]
Subject: Fwd: how can I setup a admin account which only allow three
commands


Well,

I havent seen this is possible.
But Im thinking if you use make a shell script, and executing only those
three commands:

dsmadmc -id=user -pa=password q req
dsmadmc -id=user -pa=password checki vol
dsmadmc -id=user -pa=password checko vol

Or maybe you can put each of this on a script of its own.
So your operator only has to do is to type the name of the shell you gave
him:

req.sh
checki.sh
checko.sh

It is just a tip...

 --- Julie Xu <[EMAIL PROTECTED]> escribis: > Fecha:         Thu, 9 May
2002 11:14:25 +1000
> Responder a:     "ADSM: Dist Stor Manager" <[EMAIL PROTECTED]>
> De:         Julie Xu <[EMAIL PROTECTED]>
> Asunto:      how can I setup a admin account which only allow three
> commands
> Para:           [EMAIL PROTECTED]
>
> Dear all,
>
> Question 1:
> I need setup a admin account which only allow our new operator to run
> only three commands:
>     q req
>     checki vol
>     checko vol
>     reply #
>
> However, the lowerest authority with the above commands must be used.
>
>
> Any comments will be appreciated
>
> Thanks in advance
>
>
> Julie Xu
>
> Unix/Network Administrator
> Information Technology Directorate
> University of Westen Sydney, Campbelltown
> Campbelltown NSW 2560
>
> Phone: 61 02 4620-3098
> Mobile: 0416 179 868
> Email: [EMAIL PROTECTED]

=====
"Do or Do Not, there is no try"
-Yoda. The Empire Strikes Back

_______________________________________________________________
Do You Yahoo!?
Yahoo! Messenger
Comunicacisn instantanea gratis con tu gente. http://messenger.yahoo.es

Reply via email to