
Page 4 of 16
− Modify password file (defaulted to /etc/passwd) allows you to specify a different
user base.
− Modify command to be executed (defaulted to /usr/bin/passwd) allows you to
redefine the command to be executed instead of the password change utility.
− Modify keyword (defaulted to NODISP) allows you to specify a different keyword
for exclusion of certain users from the list.
− Modify regex (defaulted to /^root|[0-9]:[^:]*NODISP|x:0:/) allows you to redefine
the entire regular expression for exclusion of certain users from the list.
Please note, that all these options are hardcoded for security reasons. For example,
giving a user the opportunity to change the command to be executed might circumvent
the security settings established by
sudo. Similar arguments also apply to the other
options.
4 Requirements
pwdch is targeted to the Sun Solaris platform, version 2.x. We tested the application
successfully on Solaris 2.8.
pwdch relies on sudo to toggle normal and super user mode. sudo enforces a
centralized control over applications running in super user mode. This open source utility
may be downloaded from
www.sunfreeware.com at no charge. You have to install
sudo before using pwdch, otherwise pwdch won't be able to execute the passwd
command (or its replacement) as expected. Although there is no tight coupling between
sudo and pwdch, we recommend to use sudo 1.6.5 or above.
pwdch uses the C library curses for its window routines. As a consequence, the TERM
variable (or its equivalent in other shells) has to be defined properly. Furthermore you
should carefully select terminal emulation application and terminal type, as some
terminals do not allow for extended navigation such as <PGUP>, <PGDN> and
<HOME>. With raising number of users to be managed, lacking these navigation options
might result in dissatisfaction. We recommend AVAYA Terminal Emulator typically
provided with AVAYA products (the successor of Terranova Communications) and
terminal type set to AT&T605BCT.
5 Installation
This section covers the installation of the executables as well as the configuration of
sudo to pass temporary priviledges to the trusted user in charge of password
management. It also describes the process of adding a menu item to the CMS
application. Please note, that all applications shall be copied to the /usr/local
folder, as doing so reduces the problem of incompatibilities to a minimum. It also
prevents you from overwriting Solaris system components or CMS application files.
Most open source installations obey to this rule and so does sudo.
5.1 SUDO Installation
This section provides only a short overview of the sudo installation. Please refer to the
instructions delivered for details. After downloading the package from
www.sunfreeware.com (called sudo-1.6.7p5-sol8-sparc-local.gz or
similar), it first has to be decompressed by entering
# gzip –d sudo-1.6.7p5-sol8-sparc-local.gz
Comentarios a estos manuales