Give users access to su to generic account, but login as themselves with generic disabled?

Posted on 2004-10-13
Medium Priority
Last Modified: 2010-04-22

What would be the easiest way to accomplish this.

For security, I need users to login as themselves; however, they need to be able to access a generic account we have.   Can I set it up so they can login as themselves, then su to the generic account, but disable login with the generic account so they are forced to login as themselves?


Question by:jkrech17
  • 2
LVL 14

Accepted Solution

chris_calabrese earned 1500 total points
ID: 12299384
Sounds like you want to use sudo. You can create the generic account with no valid password and put in rules about who can sudo to that account. You can also restrict people to running specific commands as that user rather than getting general access.

Author Comment

ID: 12299902
Would there be a way to allow them to ssh as themselves and su as the generic account, but not ssh as the generic account?

Author Comment

ID: 12300134
Thanks, I was able to deny ssh to the generic account; however, still allow them to su.  

Thanks for the input and I believe your solution would work too.

Featured Post

We Need Your Input!

WatchGuard is currently running a beta program for our new macOS Host Sensor for our Threat Detection and Response service. We're looking for more macOS users to help provide insight and feedback to help us make the product even better. Please sign up for our beta program today!

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

​Being a Managed Services Provider (MSP) has presented you  with challenges in the past— and by meeting those challenges you’ve reaped the rewards of success.  In 2014, challenges and rewards remain; but as the Internet and business environment evol…
BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (https://kb.isc.org/article/AA-01272), affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
This video tutorial shows you the steps to go through to set up what I believe to be the best email app on the android platform to read Exchange mail.  Get the app on your phone: The first step is to make sure you have the Samsung Email app on your …
Watch the video to know the simple way to remove or recover or reset lost or forgotten passwords of Outlook PST file. With Kernel Outlook Password Recovery tool such operation is very easy to perform. It is a freeware with limitation to use with 500…

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question