From: Glenn.Morris@hinchingbrooke.nhs.uk
Date: Wed Jul 16 2003 - 05:56:11 EDT
**Before acting on this e-mail or opening any attachment you are
advised to read Hinchingbrooke's disclaimer at the end of this e-mail**
Original question
I would like to delegate my responsibility of password resetting to a
specific user. I do not want to give them root access, hence my question, is
there a way for a specific user account to reset other users logins. I would
like to do this from command line and not install 3rd party software.
I received replies quickly from many people pointing me in the direction of
DOP thanks, but a big thanks goes to Peter Wolfe who guided me through step
by step.
My solution was to use dop - modifying /etc/doprc file as follows
#-----------------------------------#
ItOff {
{users { itoff }}
{groups { itoff }}
{description {
Created to allow IT Officers can change passwords.
}}
}
#------------------------------#
It_passwd {
{privs {ItOff}}
{path {cli:/usr/bin/passwd *}}
}
then using the command 'dop -s -W' to enable changes and write to binary
file.
The command /usr/sbin/dop It_passwd <username> is run by the user itoff.
***************** Hinchingbrooke's E-Mail Disclaimer *****************
This e-mail is confidential and privileged. If you are not the intended
recipient please accept our apologies; please do not disclose, copy or
distribute information in this e-mail or take any action in reliance on
its contents: to do so is strictly prohibited and may be unlawful.
Please inform us that this message has gone astray before deleting it.
Thank you for your co-operation.
**********************************************************************
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:49:27 EDT