Personal Blog of Emre Yaşar

At some situation, you may need to set some password setting different than global settings.

For example, if you want to set a password valid time parameter for a user class, named GenericUser, you can use this command

/opt/boksm/sbin/boksadm -S classadm -e -u GenericUser pswvalidtime=365

This command makes password expiration time for GenericUser user class to 365 days.

After running this command you may verify the change by typing

/opt/boksm/sbin/boksadm -S classadm -s -u GenreicUser

If you are getting “Sorry” response after trying suexec, /etc/hosts file must be first place you are looking.

emreyasar@testserver:~> /opt/boksm/bin/suexec cat /etc/shadow

Sorry

Let’s look at /etc/hosts file..

emreyasar@testserver:~> cat /etc/hosts

127.0.0.1       localhost

192.168.1.20   testserver.ford.com.tr

10.10.100.2     testserver.ford.com.tr testserver

(Devamini okumak icin tiklayin)

This topic will be dedicated just for  BoKS Server Manager application issues and experiences.

BoKS is an access control and auditing tool for especially Linux/Unix servers and also for Windows servers and applications and desktops.

If you want to apply “separation of duties” rudiment for system administrators on Linux/Unix servers you have to supply a role based acces control (RBAC) mechanism on servers.

And you have to consider RBAC especially on S-Ox servers.

Traditional ‘sudo’ mechanism is not enough for supplying RBAC.

So you have to prefer a 3^rd party application for this purpose.

(Devamini okumak icin tiklayin)