Hi all,

I am working on sun 5.9 on a Sun-Fire-V890 box.

I know that root can "su" to any user even the password of that user
has expired, but can root "su" and run a shell script in this case?

The case particular to the issue I am facing is that:
There is a unix user "spuser" whose password has expired. There is a
script sp.sh with execute permissions properly set for spuser's group.
Now, the sp.sh runs through Control-M where it is configured to be run
as spuser.

The question is would the expired password cause the failure of the
script run through Control-M?

One thing I missed out in the previous post that the Control-M tool
runs on a different Unix box.

kamit28 wrote:
> Hi all,
>
> I am working on sun 5.9 on a Sun-Fire-V890 box.
>
> I know that root can "su" to any user even the password of that user
> has expired, but can root "su" and run a shell script in this case?
>
> The case particular to the issue I am facing is that:
> There is a unix user "spuser" whose password has expired. There is a
> script sp.sh with execute permissions properly set for spuser's group.
> Now, the sp.sh runs through Control-M where it is configured to be run
> as spuser.
>
> The question is would the expired password cause the failure of the
> script run through Control-M?

In article 
<ee0f2aff-e3dc-43cb-b411-199d270b648b@g31g2000yqc.googlegroups.com>,
 kamit28 <kamit28@gmail.com> wrote:

> One thing I missed out in the previous post that the Control-M tool
> runs on a different Unix box.
> 
> kamit28 wrote:
> > Hi all,
> >
> > I am working on sun 5.9 on a Sun-Fire-V890 box.
> >
> > I know that root can "su" to any user even the password of that user
> > has expired, but can root "su" and run a shell script in this case?
> >
> > The case particular to the issue I am facing is that:
> > There is a unix user "spuser" whose password has expired. There is a
> > script sp.sh with execute permissions properly set for spuser's group.
> > Now, the sp.sh runs through Control-M where it is configured to be run
> > as spuser.
> >
> > The question is would the expired password cause the failure of the
> > script run through Control-M?

Don't know how Control-M runs remote shell scripts without logging into 
the remote system.  Unless there's a local component that talks to the 
mothership capable of doing the equivalent of "su", the remote Control-M 
software would have to ssh or rexec into the local machine, thereby 
logging in.  If you need an account to be present but not allow logins, 
disable it.  If it's expired, AFAIK, it can't run scripts as it can't 
run a shell.

-- 
DeeDee, don't press that button!  DeeDee!  NO!  Dee...
[I filter all Goggle Groups posts, so any reply may be automatically by ignored]

On Aug 25, 10:22=A0pm, Michael Vilain <vil...@NOspamcop.net> wrote:
> In article
> <ee0f2aff-e3dc-43cb-b411-199d270b6...@g31g2000yqc.googlegroups.com>,
>
>
>
>
>
>
>
> =A0kamit28 <kami...@gmail.com> wrote:
> > One thing I missed out in the previous post that the Control-M tool
> > runs on a different Unix box.
>
> > kamit28 wrote:
> > > Hi all,
>
> > > I am working on sun 5.9 on a Sun-Fire-V890 box.
>
> > > I know that root can "su" to any user even the password of that user
> > > has expired, but can root "su" and run a shell script in this case?
>
> > > The case particular to the issue I am facing is that:
> > > There is a unix user "spuser" whose password has expired. There is a
> > > script sp.sh with execute permissions properly set for spuser's group=
..
> > > Now, the sp.sh runs through Control-M where it is configured to be ru=
n
> > > as spuser.
>
> > > The question is would the expired password cause the failure of the
> > > script run through Control-M?
>
> Don't know how Control-M runs remote shell scripts without logging into
> the remote system. =A0Unless there's a local component that talks to the
> mothership capable of doing the equivalent of "su", the remote Control-M
> software would have to ssh or rexec into the local machine, thereby
> logging in. =A0If you need an account to be present but not allow logins,
> disable it. =A0If it's expired, AFAIK, it can't run scripts as it can't
> run a shell.
>
> --
> DeeDee, don't press that button! =A0DeeDee! =A0NO! =A0Dee...
> [I filter all Goggle Groups posts, so any reply may be automatically by i=
gnored]

Hmm, today Control-M could successfully run the script at the
scheduled time. Yesterday I left the password expired to see if the
control-M tool successfully runs the script as spuser or not. So what
does this mean? Is control-M capable of logging in to another unix box
over network as "root" and "su" as a user?