Shawn Walker wrote:
On 7/9/05, Sunil <[EMAIL PROTECTED]> wrote:

if I were to ask my question again, it would be:

is there a version of 'su' or equivalent piece of software which uses rsa/dsa 
keys to authenticate locally, instead of password? I don't want to have sshd 
running for this because its a local login. I didn't find much on this in 
google, that's why asking here.


I've never heard of such a critter, but that sure would be nice. I get
a little tired of typing my root password over and over again on my
personal box :}

sudo will allow multiple commands within a certain time period, without re-asking for the password, which is handy.

I also have a stupid little program installed on some boxes, in /usr/bin,
owned by root, suid:

#include <stdio.h>

#define ERR     stdout

main(argc, argv)
int     argc;
char    *argv[];
{       int myuid;

        if (argc < 2) {
                fprintf(ERR, "root: Usage: %s <cmd> [arg] [...]\n", argv[0]);
                exit(1);
        }

        if (setuid(0) < 0) {
                fprintf(ERR, "root: Can't become root\n");
                exit(1);
        }

        execvp(argv[1], &argv[1]);
        fprintf(ERR, "%s: Command not found\n", argv[1]);
        exit(1);
}


If it doesn't exist, someone could probably write a PAM module to do
it, since 'su' under Solaris uses PAM for authentication.


_______________________________________________
opensolaris-discuss mailing list
[email protected]

Reply via email to