Hi.
First, much thanks to :
Charles Gagnon <charles@Grafnetix.COM>
Frank Mundinger <ffm@ezw.uni-freiburg.de>
jbwendl@mtb.phil.mop.com (James Wendling)
The original question was :
>Is it possible with Sun OS 4.1.1 to prevent some users
>to change their passwords ?
>
>This is to prevent the users to change their e-mail
>passwords with some clients like Eudora.
There are two possibilities :
- make /usr/bin/passwd not executable for the users
(with groups)
- write a wrapper script which check the uid
-------------------------------------------------------
Date: Fri, 15 Nov 1996 09:49:19 -0500 (EST)
From: Charles Gagnon <charles@Grafnetix.COM>
To: stephane@lituus.fr (Stephane Legrand)
Subject: Re: Prevent users to change their passwords
Make /usr/bin/passwd executable by a certain group like local_account. Put all
the users who are not allowed to change their passwd into remote_account. It's
one really simple way to do this.
You could also write a wrapper script that would check the uid and allow
running passwd based on that uid. You should move /usr/bin/passwd to
/usr/bin/xpasswd for exemple and move your wrapper script to /usr/bin/passwd.
This is even more simple but you need to write a script and it's not full
proof since users who know what you did can always run /usr/bin/xpasswd.
-------------------------------------------------------
Date: Fri, 15 Nov 1996 16:07:01 +0100 (MET)
From: Frank Mundinger <ffm@ezw.uni-freiburg.de>
To: Stephane Legrand <stephane@lituus.fr>
Subject: Re: Prevent users to change their passwords
MIME-Version: 1.0
Hi,
I would put these users in a different group. Make /usr/local/bin/passwd
only executable for the others.
Greetings,
-------------------------------------------------------
Date: Fri, 15 Nov 96 11:07:03 EST
From: jbwendl@mtb.phil.mop.com (James Wendling)
To: stephane@lituus.fr
Subject: Re: Prevent users to change their passwords
Its possible to do the reverse of what was down to add the password. It has to
be done at the "ok>" level. I'm not sure of the specific syntacs, but the
help at that level should lead you to it.
--------------------------------------------------------
--> http://www.lituus.fr/stephane
- #include "std-disclaimer.h"
- This message not to be sent over the Microsoft Network
This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:11:17 CDT