Solved

Give users access to su to generic account, but login as themselves with generic disabled?

Posted on 2004-10-13
3
257 Views
Last Modified: 2010-04-22
Hi,

What would be the easiest way to accomplish this.

For security, I need users to login as themselves; however, they need to be able to access a generic account we have.   Can I set it up so they can login as themselves, then su to the generic account, but disable login with the generic account so they are forced to login as themselves?

Thanks

0
Comment
Question by:jkrech17
  • 2
3 Comments
 
LVL 14

Accepted Solution

by:
chris_calabrese earned 500 total points
ID: 12299384
Sounds like you want to use sudo. You can create the generic account with no valid password and put in rules about who can sudo to that account. You can also restrict people to running specific commands as that user rather than getting general access.
0
 

Author Comment

by:jkrech17
ID: 12299902
Would there be a way to allow them to ssh as themselves and su as the generic account, but not ssh as the generic account?
0
 

Author Comment

by:jkrech17
ID: 12300134
Thanks, I was able to deny ssh to the generic account; however, still allow them to su.  

Thanks for the input and I believe your solution would work too.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

​Being a Managed Services Provider (MSP) has presented you  with challenges in the past— and by meeting those challenges you’ve reaped the rewards of success.  In 2014, challenges and rewards remain; but as the Internet and business environment evol…
BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (https://kb.isc.org/article/AA-01272), affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question