rbac

Hi gurus what I am trying to do is allow a user called mp13t to use the
command "su - mp13tnet" (by executing the script su_mp13tnet) so that is
doesn't prompt for a password. For example I wanted the user mp13t to run the
command "su - mp13t_net" as the user root

This is what I tried but it is still prompting for a password

vi exec_attr Add su priv:suser:cmd:::/export/home/su_mp13tnet:uid=0

The file /export/home/su_mp13tnet (owned by root) contains :-
#!/bin/pfksh
/usr/bin/su - mp13t_net

vi prof_attr Add su priv:::Privilege for switching into mp13tnet

roleadd -d /export/home/mp13tnet_role -c "Role allows su - mp13tnet and
stop/start service" -P "su priv" \
-s /usr/bin/pfksh -m mp13tnet_role

passwd -d mp13tnet_role

usermod -R mp13tnet_role mp13t


Does anyone know if this is possible

tia
_______________________________________________
sunmanagers mailing list
sunmanagers@xxxxxxxxxxxxxxx
http://www.sunmanagers.org/mailman/listinfo/sunmanagers