Re: [CentOS] how to setup account which can 'su" to another account (NON-root)?

[Jay Leafey]

mcclnx mcc wrote:

we have CENTOS 5.2 on DELL server.  we need allow a user can "su" to another 
user without password.

for example:

account user1 can "su - user2" without password.   (user2 is NOT root)

I know this is big security risk but ....  Anyone know how to do it?

Thanks.

sourceuser ALL = ( runasuser ) command



bob ALL = ( fred ) /bin/grep

"bob" would use the sudo command to execute the grep command:

sudo -u fred /bin/grep 'stuff' logfile


--
Jay Leafey - jay.lea...@mindless.com
Memphis, TN

Check out the sudo command. You can alter the /etc/sudoers file to specify that the "source" user can only run a command as a specified "runas" user. The syntax would look something like: Let's say you wanted the user "bob" to be able to run the "grep" command as user "fred". The following line could be added to the /etc/sudoers file: This is a simplistic example, check the man pages for "sudo" and "sudoers" for more information.

smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos