Re: How do I do this?

From: Casper H.S. Dik (Casper.Dik_at_Sun.COM)
Date: 04/19/04


Date: 19 Apr 2004 14:48:03 GMT

Voyager <voyager@hackfaq.org> writes:

>On Fri, 19 Mar 2004 14:19:36 +0000, Casper H. S. *** wrote:

>Would this be correct?

Yes, if a bit concise...

>Roles
>~~~~~

>Roles are special system accounts. Roles are similar to regular system
>users, however roles may not log into the system. The preferred method of
>assuming a role is to use the `su` command.

One important aspect of roles is that only users who have been assigned
a particular role can "su" to that role.

So that is what you'd use on Solaris to limit, say, the
"db2/informix/oracle/sybase[1]" user, to the database administrators. You
can't login directly to as the database user and only the database
administrators can "su" to that user.

Casper

[1] Alphabetical order.

-- 
Expressed in this posting are my opinions.  They are in no way related
to opinions held by my employer, Sun Microsystems.
Statements on Sun products included here are not gospel and may
be fiction rather than truth.

Quantcast