Unable to login RBAC User Acct



Hi,

I have an existing user (psoft) & want to allow this user to only be able to reboot a server, stop and start an application whenever she want. I just finish setting up an RBAC for that user acct (psoft) and able to login as psoft user & reboot the server. However, the issue I encounter is that when I login as root & then su - psoft, I can reboot the machine, but if I telnet into the server and login as psoft, I get the below errors. I already set the password for psoft user acct & I don't what else I am missing in setup. Could someone please help me out? Am I miss-configure RBAC acct?

root@vcs-test-admin #roles psoft
psoftadm

root@vcs-test-admin #profiles psoftadm
Shut
Basic Solaris User
All

root@vcs-test-admin #grep Shut /etc/security/exec_attr
Shut:suser:cmd:::/usr/sbin/shutdown:uid=0

root@vcs-test-admin #grep psoft /etc/passwd
psoft:x:1003:10002:PeopleSoft Test Acct:/export/home/psoft:/bin/bash
psoftadm:x:1000:10002:PeopleSoft Role Acct:/export/home/psoftadm:/bin/pfsh

root@vcs-test-admin #grep psoft /etc/user_attr
psoftadm::::type=role;profiles=Shut
psoft::::type=role;roles=psoftadm

root@vcs-test-admin #telnet localhost
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
login: psoft
Password:
Roles can only be assumed by authorized users
Login incorrect
Connection to localhost closed by foreign host.


root@vcs-test-admin #su - psoft
Sun Microsystems Inc. SunOS 5.10 Generic January 2005
Hello user psoft

psoft@vcs-test-admin #who am i
root pts/2 May 25 10:28 (10.30.230.230)

psoft@vcs-test-admin #/usr/ucb/whoami
psoft

Any helps/suggestions are appreciated.

TIA,
-Chris




---------------------------------
Park yourself in front of a world of choices in alternative vehicles.
Visit the Yahoo! Auto Green Center.
_______________________________________________
sunmanagers mailing list
sunmanagers@xxxxxxxxxxxxxxx
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



Relevant Pages

  • Re: problems connecting to database from outside.
    ... I'm able to use a username/password application to login ... unable to login using the localhost, ... I'm using flash-xml to send data to an asp form that store ... >>How can I trace and see where the connection stops? ...
    (microsoft.public.inetserver.asp.db)
  • Re: Sendmail+sasl2+smtpauth didnt work?
    ... den 13.09.2004 schrieb Alexander Dalloz um 3:06: ... LOGIN is possible too. ... Connected to localhost. ... Connection closed by foreign host. ...
    (Fedora)
  • Fresh 5.0.7 inst. , ftp not working, very curious
    ... i can login from localhost to localhost but after login i get error: ... ftp> status ... No proxy connection. ...
    (comp.unix.sco.misc)
  • localhost hostname problem
    ... I'm having a devil of a time: running FC2 through eth0 RCA modem on ... That connection did something, now instead of being ... localhost at login, I'm x1-6-04-4f-00 or something like that, which ... to get back to localhost? ...
    (Fedora)
  • RE: copied music cds have a skip in last 18 seconds
    ... If installing all missing Windows Updates doesn't fix your problem ... xiowan.......in tucson ...
    (microsoft.public.windows.mediacenter)