[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference turris::digital_unix

Title:	DIGITAL UNIX(FORMERLY KNOWN AS DEC OSF/1)
Notice:	Welcome to the Digital UNIX Conference
Moderator:	SMURF::DENHAM

Created:	Thu Mar 16 1995
Last Modified:	Fri Jun 06 1997
Last Successful Update:	Fri Jun 06 1997
Number of topics:	10068
Total number of notes:	35879

9575.0. "give non-privileged user access to privileged commands?" by doosje.bro.dec.com::HERTA (For something fulfilled this hour, loved, or endured) Tue Apr 22 1997 10:47

We are supporting an international client running a third party application 
under Digital UNIX V3.2G.  They have a first line support on site, whom 
they would like to be able to execute a limited set of privileged commands 
such as looking at and removing print jobs of other users, and stopping and 
starting printers.  (Other commands may follow.)  I understand it is possible
in some UNIX versions to play around with 'lp' and similar groups to achieve 
this, but I couldn't get this to work on Digital UNIX.

Is there a way to do this in Digital UNIX V3.2G or V4.x?  We are running
enhanced security, and I'm aware of the operator role, but that would give them 
rather too many privs.

Kind regards,

Herta

T.R	Title	User	Personal Name	Date	Lines
9575.1	Already been discussed	NNTPD::"[email protected]"	Ann Majeske	`Tue Apr 22 1997 11:20`	7
	This kind of thing has already been discussed in several notes in this file. Why don't you do a search and see what you can come up with? I know in at least one case the dop utility was suggested as a way to do this. I don't know if dop was available for v3.2, but it is available for V4.0. If you go with dop, make sure to get the patched version, there is a security hole in the original. [Posted by WWW Notes gateway]
9575.2		LEXS01::GINGER	Ron Ginger	`Tue Apr 22 1997 11:42`	6
	The most common solution to this is sudo. I believe a version is on the latest Freeware CD, but it is easy to find on the net. It works very well, we do exactly waht you require at my customer. sudo has been mentioned here many times.
9575.3		doosje.bro.dec.com::HERTA	For something fulfilled this hour, loved, or endured	`Wed Apr 23 1997 05:19`	16
	Re:.1 - Ann Majeske > This kind of thing has already been discussed in several notes in this file. > Why don't you do a search and see what you can come up with? I know in By way of explanation: I had tried a dir/title=privilege before posting the topic. Following your remark, I found that a dir/title=priv gave more useful results. Note that this conference is getting huge, and a search for something as vague as "privilege" may take a long time. This is annoying if you're extremely short of time due to project deadlines, and if you don't know in advance whether the search will produce something useful. I.e., even your message that the topic has been discussed before was worth posting the question. Re:.1 & .2 - Ann Majeske & Ron Ginger Thanks for pointing me to sudo and dop. Herta
9575.4	Try the AltaVista search	SMURF::PBECK	Who put the bop in the hale-de-bop-de-bop?	`Wed Apr 23 1997 11:58`	9
	A much faster way of doing notes file searches is through http://altavista.notes.lkg.dec.com:8000/ Go to the advanced page and enter something like "conference digital_unix" and privilege in the selection criteria window.
9575.5	http://altavista.notes.lkg.dec.com:8000/	DECC::SULLIVAN	Jeff Sullivan	`Wed Apr 23 1997 13:12`	16
	> A much faster way of doing notes file searches is through > http://altavista.notes.lkg.dec.com:8000/ Yes! I use Alta Vista NOTES search exclusively. It's much faster! The query that I would use (same result as in .4) is privilege +url:digital_unix (Less keystokes, even faster!) You can use that from the default window. -Jeff
9575.6		finder.uvo.dec.com::COFFEYJ	La Feline Flooz - a unix cat	`Thu Apr 24 1997 11:56`	9
	The UK CSC use Comet a lot too... http://encke.alf.dec.com/cgi/v4.3 Very handy! Finds half our calls, (ok so half the time all it does is identify someone has seen something similar but it helps a lot!)
9575.7	Thanks for all the search pointers	doosje.bro.dec.com::HERTA	For something fulfilled this hour, loved, or endured	`Thu Apr 24 1997 14:32`	5
	Re:.4 .5 .6 Thank you all for the search pointers and syntax help. Greatest time savers since months. Looks like I'll actually get some real work done now. ;-) Herta
9575.8	Re: .3	NNTPD::"[email protected]"	Ann Majeske	`Fri Apr 25 1997 11:50`	37
	Re: .3 - Herta > Re:.1 - Ann Majeske > > This kind of thing has already been discussed in several notes in this file. > > Why don't you do a search and see what you can come up with? I know in > By way of explanation: I had tried a dir/title=privilege before posting > the topic. Following your remark, I found that a dir/title=priv gave more > useful results. Note that this conference is getting huge, and a search for > something as vague as "privilege" may take a long time. This is annoying if > you're extremely short of time due to project deadlines, and if you don't know > in advance whether the search will produce something useful. I.e., even your > message that the topic has been discussed before was worth posting the > question. Yes, trying to search through this notes file for existing noted is "annoying" and even frustrating at times. But, you have to consider that most of us who respond to this notes file have full time + jobs that don't include responding to notes, so we're doing this on our OWN time. In addition, answering the same problem over and over takes time away from addressing new problems. Also, there are many people who are try to keep up with responding to the notes file, so in addition to the time spent by those who did respond to your note, there's the extra time spent by those scanning the file looking for notes in their area of expertise to respond to. One thing you did that I really like is that you clearly stated your problem in the note title. It really speeds things up if we don't have to read the whole note to find out what the problem is. Ann [Posted by WWW Notes gateway]