LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Other *NIX Forums > Solaris / OpenSolaris
User Name
Password
Solaris / OpenSolaris This forum is for the discussion of Solaris, OpenSolaris, OpenIndiana, and illumos.
General Sun, SunOS and Sparc related questions also go here. Any Solaris fork or distribution is welcome.

Notices


Reply
  Search this Thread
Old 07-05-2006, 02:17 AM   #16
sajidmumtaz
Member
 
Registered: Jan 2006
Posts: 59

Original Poster
Rep: Reputation: 15

hi !
I did so yesterday but this dont seems elegant. So i was searching to implement it on group level but didnt get any doc for that. As all users are in one group so can we implement this on group level?
Regards.
 
Old 07-05-2006, 02:33 AM   #17
jlliagre
Moderator
 
Registered: Feb 2004
Location: Outside Paris
Distribution: Solaris 11.4, Oracle Linux, Mint, Debian/WSL
Posts: 9,789

Rep: Reputation: 492Reputation: 492Reputation: 492Reputation: 492Reputation: 492
I don't think you can just by configuration. A small suid program would do the trick though.
 
Old 07-05-2006, 02:43 AM   #18
sajidmumtaz
Member
 
Registered: Jan 2006
Posts: 59

Original Poster
Rep: Reputation: 15
Seems strange. Coz in my mind if we can allow one user to execute command then y not a group. suppose if we have 5000 user in group so we have to write 5000 lines for each user.
As u said to duplicate /etc/user_attr for each user. But u also mentioned in ur first post like this
/etc/security/prof_attr
volmgter:Name who are allowd to run command
so we have to write each user name in this file too if not then wats the reason ?
Regards.
 
Old 07-05-2006, 03:42 AM   #19
jlliagre
Moderator
 
Registered: Feb 2004
Location: Outside Paris
Distribution: Solaris 11.4, Oracle Linux, Mint, Debian/WSL
Posts: 9,789

Rep: Reputation: 492Reputation: 492Reputation: 492Reputation: 492Reputation: 492
If you have 5000 users, I believe you do not handle them in flat files, but by using some centralized database, like NIS or LDAP.

In that case, the provisioning process should easily be modified to update the user_attr map.
 
Old 07-05-2006, 04:39 AM   #20
sajidmumtaz
Member
 
Registered: Jan 2006
Posts: 59

Original Poster
Rep: Reputation: 15
We have NIS on our server. but i have dont have much about its configuration as i joined after its installation.
Is there any way u can tell me that i can make changes in that so that user can execute this command on any workstation.
Regards.
 
Old 07-05-2006, 04:46 AM   #21
sajidmumtaz
Member
 
Registered: Jan 2006
Posts: 59

Original Poster
Rep: Reputation: 15
We have NIS on our server. but i have dont have much about its configuration as i joined after its installation.
Is there any way u can tell me that i can make changes in that so that user can execute this command on any workstation.
Regards.
 
Old 07-05-2006, 04:46 AM   #22
sajidmumtaz
Member
 
Registered: Jan 2006
Posts: 59

Original Poster
Rep: Reputation: 15
We have NIS on our server. but i have dont have much about its configuration as i joined after its installation.
Is there any way u can tell me that i can make changes in that so that user can execute this command on any workstation.Because i editing every workstation for this.
Regards.
 
Old 07-05-2006, 05:24 AM   #23
jlliagre
Moderator
 
Registered: Feb 2004
Location: Outside Paris
Distribution: Solaris 11.4, Oracle Linux, Mint, Debian/WSL
Posts: 9,789

Rep: Reputation: 492Reputation: 492Reputation: 492Reputation: 492Reputation: 492
I think that if you are unfamiliar with NIS, the best way would be to write a simple suid wrapper around volmgt, and install it on every machine.

Here's an example:
Code:
#include <unistd.h>
#include <stdlib.h>
#define ALLOWED_GROUP 12345
int main()
{
  if(getgid==ALLOWED_GROUP)
  {
    setuid(0);
    setgid(0);
    system("/etc/init.d/volmgt stop");
    system("/etc/init.d/volmgt start");
  }
  else
  {
    fprintf(stderr,"You aren't allowed to restart vold");
    exit(1);
  }
  return 0;
}

Last edited by jlliagre; 07-05-2006 at 05:29 AM.
 
Old 07-05-2006, 07:14 AM   #24
sajidmumtaz
Member
 
Registered: Jan 2006
Posts: 59

Original Poster
Rep: Reputation: 15
thanks again. i will check it. I have applied the old method i mean duplicate the command for different users.
Regards.
 
Old 07-07-2006, 12:17 AM   #25
sajidmumtaz
Member
 
Registered: Jan 2006
Posts: 59

Original Poster
Rep: Reputation: 15
Hi !
I am really confused on behaviour of this solaris 9 i.e i have workstation 5 on which kingston usb mount and after some time when i try to mount it again it wont work. Similarly some times on it automatically show its icon on desktop. The same happen with other workstaion too. Dont know wats the problem. IT really makes solaris 9 picture bad in front of students who work on microsoft where every thing work easily.
Regards.
 
Old 07-07-2006, 01:36 AM   #26
jlliagre
Moderator
 
Registered: Feb 2004
Location: Outside Paris
Distribution: Solaris 11.4, Oracle Linux, Mint, Debian/WSL
Posts: 9,789

Rep: Reputation: 492Reputation: 492Reputation: 492Reputation: 492Reputation: 492
Quote:
Originally Posted by sajidmumtaz
Hi !
I am really confused on behaviour of this solaris 9 i.e i have workstation 5
I guess you mean UltraSPARC 5.
Quote:
on which kingston usb mount and after some time when i try to mount it again it wont work.
Were they properly unmounted ?
Quote:
Similarly some times on it automatically show its icon on desktop.
This is CDE expected behaviour when volume management is running.
Quote:
The same happen with other workstaion too. Dont know wats the problem.
Can you post system message logs ?
Quote:
IT really makes solaris 9 picture bad in front of students
Unlucky these students who are shown an O/S designed 5+ years ago, while Solaris 10 6/06 and Solaris Express are available with so many interesting features, including USB hot plug support.
Quote:
who work on microsoft where every thing work easily.
That's not the usual experience.

Mounting USB devices was probably not a top priority when Solaris 9 was designed.

Are the systems up to date with USB patches ?

You should read the Solaris USB faq at http://www.sun.com/io_technologies/USB-Faq.html which list the recommended patches, and many tips that may help you diagnosing and fixing your issues.
 
Old 07-07-2006, 05:54 AM   #27
sajidmumtaz
Member
 
Registered: Jan 2006
Posts: 59

Original Poster
Rep: Reputation: 15
hi !
thanks jlliagre for nice comments.
System patches are not updated n i m working on it. Just downloading Patch Pro so that i can download latest patches.
Regard.
 
Old 07-13-2006, 01:11 PM   #28
sajidmumtaz
Member
 
Registered: Jan 2006
Posts: 59

Original Poster
Rep: Reputation: 15
thx jlliagre for ur time n help.
 
Old 01-10-2007, 12:30 AM   #29
capricorn80
Member
 
Registered: Jun 2006
Distribution: CentOS
Posts: 154

Rep: Reputation: 15
how can i give rights to certain users for same command to mount usb as i m using Directory server.
 
Old 01-10-2007, 04:33 AM   #30
jlliagre
Moderator
 
Registered: Feb 2004
Location: Outside Paris
Distribution: Solaris 11.4, Oracle Linux, Mint, Debian/WSL
Posts: 9,789

Rep: Reputation: 492Reputation: 492Reputation: 492Reputation: 492Reputation: 492
You can just replace the start commands in the code I posted in http://www.linuxquestions.org/questi...41#post2321241 by the one required by your product.

You may also use Solaris RBAC to achieve the same goal.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Solaris 10 can't mount a CentOS share ALUOp Linux - Networking 2 11-08-2008 06:32 AM
Cant mount UFS in Solaris but can in Linux sstallion Linux - Newbie 1 10-28-2004 07:47 AM
mount usb module then mount usb hard drive guanyu Linux - Hardware 1 10-08-2003 11:50 AM
How to mount Solaris 2.6 Floppy? leverite Linux - Newbie 2 09-04-2003 09:17 PM
nfs mount of solaris drive starkeylabs Linux - Networking 4 06-20-2003 10:16 AM

LinuxQuestions.org > Forums > Other *NIX Forums > Solaris / OpenSolaris

All times are GMT -5. The time now is 04:57 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration