View Single Post

  #4 (permalink)  
Old 05-30-2007, 02:35 PM
nixcraft's Avatar
nixcraft nixcraft is offline
Never say die
User
 
Join Date: Jan 2005
Location: BIOS
My distro: Ubuntu
Posts: 1,060
Rep Power: 10
nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute nixcraft has a reputation beyond repute
Default

Quote:
want to see whether the users in the systems are having administrator's rights.
All administrator's rights and to grant rights to other you need to use sudo under Linux. Login as root and enter:
Code:
vi /etc/sudoers
OR type
Code:
visudo
Here is my own file:

Code:
# User privilege specification
root    ALL=(ALL) ALL

# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL

# WWW-data can run any command w/o a password
www-data ALL= NOPASSWD: ALL
Read the man page for sudo or just get some basic idea here: Allow a normal user to run commands as root | nixCraft

Quote:
By the way, what is PAM?
Pluggable authentication modules or PAM are a mechanism to integrate multiple low-level authentication schemes into a high-level API, which allows for programs that rely on authentication to be written independently of the underlying authentication scheme. PAM was first proposed by Sun Microsystems in an OSF-RFC dated October, 1995. It was adopted at the authentication framework of the Common Desktop Environment. As a stand-alone infrastructure, however, PAM first appeared from an open-source, Linux-PAM, development in Red Hat Linux 3.0.4 in August of 1996. PAM is currently supported in AIX, FreeBSD, HP-UX, Linux, Mac OS X, NetBSD and Solaris. With PAM you can do advanced security settings such as
=> Restrict the use of su command
=> Prevent from using or reuse same old passwords under Linux
=> OpenSSH Root user account restriction
=> Allow user to login via ftp but not via ssh/telnet and much more
In short read PAM ADMIN Guide and other docs ==> The Linux-PAM Administration and Developer Guides

Hope this helps!
__________________
Vivek | My personal blog
Linux Evangelist
Play hard stay cool
Reply With Quote