rbac not OK

AbrahamJose · 11-15-2006, 06:57 AM

Hi
I tried rbac in solaris 9 to manage printers
1. roleadd ... lpuser
2. passwd lpuser
3. usermod -R lpuser user1

No errors so far
I login as user1
roles command outputs lpuser
su lpuser
lpc
lpc>enable pr1
says privileged command

Anything else required for rbac to work.

Sorry, I am not much experienced in Solaris.

jlliagre · 11-15-2006, 08:58 AM

I think the problem is you are using a command (lpc) that is not part of the "Printer Management" profile set.

See /etc/security/exec_attr to see the ones included.

AbrahamJose · 11-17-2006, 02:15 AM

commands like enable/disable/lpshut etc doesn't work, even if given not throgh lpc.

jlliagre · 11-17-2006, 03:03 AM

So it will help if you post the full set of options you used to create the role.

"..." doesn't help much understanding what you have done.

AbrahamJose · 11-20-2006, 10:27 PM

1. roleadd -m -d /export/home/lpuser -c "Manage Printers" -A solaris.admin.printer.read solaris.admin.printer.modify solaris.admin.printer.delete lpuser
2. passwd lpuser
3. usermod -R lpuser user1

No errors so far
I login as user1
roles command outputs lpuser
su lpuser