Re: shadow password

1996-11-26 Thread Helmuth Blasch
On Tue, 26 Nov 1996, Fundamental wrote:

 I recently intsalled the shadow password packages to my system, everything
 seems to be going well accept for one minor hassle, my normal account cant
 become super-user.  When i try i get the message that i do not have
 permission to do so.  How do i get the permission?

you have to be in group root

file group:

root:x:0:root,your loginname
...
...
...


 
 thanks:)
 
 Sahua,
 
 - mIcHaEl
 
   ciao Helmuth (irc: Pvppet)

 __Blasch Helmuth,Graz University of Technology, Austria
 \/   Computing and Information Services Center 
 L\in/uX   Steyrergasse 30/Parterre (CE04), 8010 Graz, Austria
   \/  Email: [EMAIL PROTECTED]  Tel.: + 43 316 873 6883 (FAX 7699)


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED]


Re: shadow password

1996-11-26 Thread Helmuth Blasch
On Mon, 25 Nov 1996, Roger Endo wrote:
  On Tue, 26 Nov 1996, Fundamental wrote:
  
   I recently intsalled the shadow password packages to my system, everything
   seems to be going well accept for one minor hassle, my normal account 
   cant
   become super-user.  When i try i get the message that i do not have
   permission to do so.  How do i get the permission?
  
  you have to be in group root
  
  file group:
  
  root:x:0:root,your loginname
  ...
 I don't like that.  It seems unsafe to me.  There's gotta be
 a better solution
 
 Currently, I am putting in special users in /etc/suauth
 but I only know the syntax for making su ask for the current
 users passwd, and not root's.  Would like to prompt it to
 ask for root's password.  Workaround anyone?
 
 Roger Endo


yep, its safer to but the usernames in suauth

looks like (file /etc/suauth):

root:ALL EXCEPT login1,login2:DENY

or

root:ALL EXCEPT login1,login2,GROUP root:DENY

watch out! keyword GROUP let the parser know that all words behind GROUP
are group names - only the : escapes.
the examples let the users login1 and login2 and all users in group root
(2nd examp.) to get root access by enter the roots password, all others
will receive the message access denied.

root:login1:NOPASS
root:login2:OWNPASS
root:ALL EXCEPT login3:DENY

let the user login1 get root access without passwd
the user login2 have to put in his own passwd and
the user login3 have to use the root passwd all other user cant get in

so if you want the users login1 login2 and login3 to be promted for the
root password you use:

root:ALL EXCEPT login1,login2,login3:DENY

hope that helps

   ciao Helmuth (irc: Pvppet)

 __Blasch Helmuth,Graz University of Technology, Austria
 \/   Computing and Information Services Center 
 L\in/uX   Steyrergasse 30/Parterre (CE04), 8010 Graz, Austria
   \/  Email: [EMAIL PROTECTED]  Tel.: + 43 316 873 6883 (FAX 7699)


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED]