su a user without giving the passwd

[Barn]

Hi!

How a none root user can su an other none root user without needing to give the password?

Note that I don't want to use the rsh command, .rhosts file...

Thanks in advance.

 

[Morsing]

Use sudo?? Then 'sudo su user'.
You need to download sudo somewhere on the net.

Cheers Henrik Morsing
Certified AIX 4.3 Systems Administration
& p690 Technical Support

 

[Barn]

I 've got sudo from

http://www.bullfreeware.com/

sudo-1.6.6.0 (May 3 2002 )

How do I use it now? The only help I have from the commande is:
#sudo -h
usage: sudo -V | -h | -L | -l | -v | -k | -K | [-H] [-P] [-S] [-b] [-p prompt]
[-u username/#uid] -s | <command>

Thank you.

 

[Morsing]

Create an /etc/sudoers file containing:

username ALL=(ALL) NOPASSWD: ALL

This means that that user can do 'sudo su -' without giving a password at all.
The file should have permissions set to 660.

Cheers Henrik Morsing
Certified AIX 4.3 Systems Administration
& p690 Technical Support

 

[SDMguru]

Or, just modify the /etc/passwd so the user and group ID of the two users matches.

IE
maint:!:200:200::/home/maint
user1:!:300:300::/home/user1

becomes

maint:!:200:200::/home/maint
user1:!:200:200::/home/user1

 

[dsn1]

You could just write a simple c program which performs a su to the appropriate user and have this program suid ed to root

Dave

 

[GenFoch]

umm, if you give sudo all, then you can run anything as root. better to just give the user a commad like

USERA ALL = su - USERB

this will allow usera to only run su - USERB and not other stuff like sudo rm -R *

here is the web doc on the suders file

http://www.courtesan.com/sudo/man/sudoers.html

Before you criticize someone, you should walk a mile in their shoes. That way you're a mile away and you have their shoes.

 

[ElgisRamon]

Better try [tt]visudo[/tt] to edit your [tt]/etc/sudoers[/tt] file (simply give the command not the file), it will validate your syntax.

Read your sudo man page, it will teach you what to do to give the user only some commands, only commands with options, commands when is logged from some machines, et cetera.


I hope it works...
Unix was made by and for smart people.

 

[Barn]

Thanks guys!

Barn.
IBM Certified -- Am I?