03/27/96, 4FAX# 2265 Making a Second Root User SPECIAL NOTICES Information in this document is correct to the best of our knowledge at the time of this writing. Please send feedback by fax to "AIXServ Information" at (512) 823-4009. Please use this information with care. IBM will not be responsible for damages of any kind resulting from its use. The use of this information is the sole responsibility of the customer and depends on the customer's ability to eval- uate and integrate this information into the customer's operational environment. ABOUT THIS DOCUMENT The method documented in the "System Management Guide" (SC23-2457-00) for adding a second root user is in error. This document describes how to create a second root user and is applicable to AIX versions 3.2 and 4.1. CREATING A SECOND ROOT USER The only way to create a second root user is to create a user and manually edit the user ID field and group ID field in /etc/passwd and change the user ID to ID 0. For example, for a typical user ID change the entry from russ:!:206:1::/u/russ:/bin/ksh to russ:!:0:0::/u/russ:/bin/ksh This will create a user (in this case, russ) with identical permissions to root. | CREATING SPECIAL USERS WITH ROOT AUTHORITY You can also create special users that have root authority but can only do one command. For instance, to create a user that can only reboot the system, create a regular user called shutdown and modify the /etc/passwd command to change | the user and group ID to 0. For example in AIX 3.2: shutdown:!:0:0::/u/shutdown:/bin/ksh Then change the initial program from "/bin/ksh" to "/etc/shutdown -Fr": shutdown:!:0:0::/u/shutdown:/etc/shutdown -Fr | For AIX 4.1 the /etc/passwd entry for shutdown should be | shutdown:!:0:0::/u/shutdown:/usr/sbin/shutdown -Fr | The shutdown command on 4.1 is located in /usr/sbin. Making a Second Root User 1 03/27/96, 4FAX# 2265 Now when user shutdown logs in, the system will shutdown and reboot. Making a Second Root User 2 03/27/96, 4FAX# 2265 READER'S COMMENTS Please fax this form to (512) 823-4009, attention "AIXServ Informa- tion". You may also e-mail comments to: elizabet@austin.ibm.com. These comments should include the same customer information requested below. Use this form to tell us what you think about this document. If you have found errors in it, or if you want to express your opinion about it (such as organization, subject matter, appearance) or make sug- gestions for improvement, this is the form to use. If you need technical assistance, contact your local branch office, point of sale, or 1-800-CALL-AIX (for information about support offer- ings). These services may be billable. Faxes on a variety of sub- jects may be ordered free of charge from 1-800-IBM-4FAX. Outside the U.S. call 415-855-4329 using a fax machine phone. When you send comments to IBM, you grant IBM a nonexclusive right to use or distribute your comments in any way it believes appropriate without incurring any obligation to you. NOTE: If you have a problem report or item number, supplying that number may help us determine why a procedure did or did not work in your specific situation. Problem Report or Item #: Branch Office or Customer #: Be sure to print your name and fax number below if you would like a reply: Name: Fax Number: ______________________________________________________________________ ______________________________________________________________________ ______________________________________________________________________ ______________________________________________________________________ ______________________________________________________________________ ______________________________________________________________________ ______________________________________________________________________ ______________________________________________________________________ ______________________________________________________________________ ______________________________________________________________________ ______________________________________________________________________ ______________________________________________________________________ END OF DOCUMENT (second.root.user.cmd, 4FAX# 2265) Making a Second Root User 3