Which command we use to check  root privileged users in solaris

Hi,
please tell me ,if i want to check the number of people using super user privilege in the sun solaris server .how we can find that ? ,is there any command to find that ?
please reply me
boby

there is few ways to use root privileges
- login as root or as user with UID 0
- login as ordinary user and do su - . In this case check group ownership of su file and pam config
- use sudo command - check sudo config file

Similar Messages

  • How to find which custom program uses authorization checks

    Hi all,
    I have been asked to find out which custom ABAP program in our organization is using Authorizations checks and which is not.
    Since there are thousands of custom programs I will need to automatize this process somehow.  But I am not an ABAP expert and I will need some help.
    Could any of you give me an idea of what would be the best strategy to find out if authorization objects/checks exist in a number of ABAP programs?  (would a simple text search do?).
    Many thanks,
    Aldo

    If you are looking out for Authorization related to Execution of any program, then look for entries in table TRDIR where field SECU (Authorization Group) is not blank.
    Below SAP documentation may help you:
    Authorization Group
    Authorization group to which the program is assigned.
    The assignment of a program to an authorization group plays a role when the system checks whether the user is authorized to:
    Execute a program
    --> Authorization object S_PROGRAM
    Edit a program (-Include) in the ABAP Workbench
    --> Authorization object S_DEVELOP
    Programs that are not assigned to an authorization group are not protected against display and execution.
    Security-related programs should, therefore, always be assigned to an authorization group.
    Report RSCSAUTH can also be used to assign programs to authorization groups. This report is documented in detail.

  • Which command i use to run SWING APPLET

    Hi friends,
    i m a new in swing technology i got and problem when i run swing applet .
    i make a file and complie it with -deprecation it work and make a .class file but how can i run this applet [i use jview command , appletviewer command but it can't work]
    i hope that someone hellp me.

    Just as a matter of interest and i know its a stupid question, but did you create a html file to access the class file/jar
    Here is some example code of an applet html page
    Hope it helps...
    Also have you put it in a Jar file?
    <html>
    <head>
    <title>(Whatever title youu want)</title>
    <BODY TEXT="#000000" BGCOLOR="#FFFFFF" LINK="#0000EE" VLINK="#551A8B" ALINK="#FF0000">
    <TR>
    <APPLET CODE = "ClassName.class" ARCHIVE = "JarName.jar" WIDTH = "800" HEIGHT = "600"></XMP>
    <PARAM NAME = CODE VALUE = "ClassName.class" >
    <PARAM NAME = ARCHIVE VALUE = "JarName.jar" >
    <PARAM NAME="type" VALUE="application/x-java-applet;version=1.3">
    <PARAM NAME="scriptable" VALUE="false">
    <dont worry about this>(they just variables for my applet)
    <PARAM NAME = SERVER_IP VALUE ="192.1.1.209">
    <PARAM NAME = SERVER_PORT VALUE =8701>
    <PARAM NAME = DEBUG VALUE =true>
    <PARAM NAME = REFRESH VALUE =10000>
    <PARAM NAME = TAIL_REFRESH VALUE =2500>
    <PARAM NAME = MESSAGE_TIMEOUT VALUE =60>
    </dont worry about this>
    </APPLET>
    </body>
    </html>

  • How to edit an online order that I placed using guest check out

    I stupidly hit guest check out when placing an online order, and despite using an email address that was registered to my apple account the order is not associated with my account. So now there is a problem with the payment because my bank asked me to confirm such a large transaction, and apple wants me to update the payment info which immediately takes me to an apple account log in screen which since I used guest check out logging in just brings me to a screen that says this account doesn't have access to this order. So I can't edit the order that apple is requesting me to order because I used guest check out. I don't want to cancel the order because it will delay receiving my phone by nearly a month!!! AAAAGGGHHH!!! Any suggestions??

    Try calling the phone number in guest checkout in this article. I'd expect a delay.
    http://store.apple.com/us/help/your_account

  • How to check virtual Memory Info on Solaris 10

    Hello,
    Can anybody please tell me command used to calculate or check virtual memory configured on my solaris 10 T2000 servers.
    From Solaris Management Console I did get this information but I was wondering which command it used to extract this information.
    Thanks in Advance

    Here is vmstat 2 2 s output on my machine
    kthr memory page disk faults cpu
    r b w swap free re mf pi po fr de sr s0 s1 s2 s3 in sy cs us sy id
    0 0 0 18874528 3257488 19 47 32 3 3 0 1 2 3 0 0 964 16476 1115 1 1 98
    0 0 0 21063104 5781064 36 135 28 0 0 0 0 0 0 0 0 1509 5049 1946 1 1 99
    It says system has 21063104KB of Swap but my solaris management console shows
    Physical Memory: 8184 MB
    Virtual Memory : 21992 MB
    Virtual Memory used : 7%(1537/21992)20455 MB Available
    I want to know how Solaris Management Console calculated my Virtual Memory.
    Thanks

  • What is to be used to know whether the user has made any changes in alv

    hi all,
           i want to know what is to be used for checking whether a user has done any changes in an editable alv.
    i have used sy-datar but it has nothing in it.
    so kindly help SAP gurus.
    with regards,
    Sindhuja

    Hi Sindhu ,
    If you want to capture the changed data ( rows) use the event : handle_data_changed .
    When the user changes the data , this event will be triggered and the table will have only the changed data.
    Regards,
    Chitra

  • CentOS based linux VM running on Hyper-v : Checking root filesystem fails when kernel switches having old PV(para virtualised driver based on 2.6.32 linux kernel) to new PV(which is equivalent to linux integration component 3.4)

    hi all,
    I am running a CentOS base VM on top of Hyper-V server. I upgraded PV drivers of Hyper-V in linux kernel 2.6.32 in order to support
    Windows Server 2012, then i am hitting below issue on Windows Server 2008 when kernel switches from old PV(which is 2.6.32 based) to new PV(which is equivalent to linux integration component 3.4).i
    am hitting following filesystem check error messages :
    Setting hostname hostname:
    Checking root filesystem
    fsck.ext3/dev/hda2:
    The superblock could not be read or does not describe correct ext2 filesystem. If the device is valid and it really contains an ext2
    filesystem(and not swap or ufs or something else),then the superblock is corrupt, and you might try running e2fsck with an alternate superblock:
    e2fsck -b 8193 <device>
    : No such file or directory while trying to open /dev/hda2
    *** An error occurred during the filesystem check.
    *** Dropping you to a shell; the system will reboot
    *** When you leave the shell.
    Also, when I go to the repair filesystem mode. I found out the strange behaviour when i ran those command :
    (Repair filesytem) 1 # mount
    /dev/hda2 on / type ext3 (rw)
    proc on /proc type proc (rw)
    (Repair filesystem) 1# cat /etc/mtab
    /dev/hda2 /ext3 rw 0 0
    proc /proc proc rw 0 0
    (Repair filesystem) 1# df
    Filesystem 1K-blocks used Available Use% Mountedon
    /dev/hda2 4%
    I think for all above command there should be /dev/sda2 instead of /dev/hda2.
    Also my fstab , and fdisk -l looks like ok for me.
    (Repair filesystem) 1# cat /etc/fstab
    LABEL=/ / ext3 defaults 1 1
    LABEL=/boot /boot ext3 defaults 1 2
    devpts /dev/pts devpts gid=5,mode=620 0 0
    tmpfs /dev/shm tmpfs defaults 0 0
    proc /proc proc defaults 0 0
    sysfs /sys sysfs defaults 0 0
    LABEL=swap-xvda3 swap swap defults 0 0
    (Repair filesystem) 1# fdisk -l
    Device Boot Start End Block Id System
    /dev/sda1 * 1 49 98535 83 Linux
    Partition 1 does not end with cylinder boundary.
    /dev/sda2 49 19197 39062500 83 Linux
    Partition 2 does not end with cylinder boundary.
    /dev/sda3 ......
    Partition 3 does not ......
    /dev/sda4 ......
    Partition 4 does not end ....
    (Repair filesystem) 1# e2label /dev/sda1
    /boot
    (Repair filesystem) 1# e2label /dev/sda2
    (Repair fielsystem) 1# ls /dev/sd*
    /dev/sda /dev/sda1 /dev/sda2 /dev/sda3 /dev/sda4
    (Repair filesyatem) 1# ls /dev/hd*
    ls: /dev/hd*: No such file or directory
    Kindly suggest any configuration of windows server or kernel configs missing or how to resolve this issues
    Many many thanks for your reply.
    thanks & Regards,
    Ujjwal

    i am not able to understand duplicate UUID and from where it is picking /dev/hda* ?
    ~
    VVM:>>
    VVM:>> Output of dmesg | grep ata contain substring "Hyper-V" ?
    VVM:>>
    it doesn't contain "Hyper-V" or ata related message and the output doesn't change with boot parameter reserve=0x1f0, 0x8
    ~~
    ~~~~
    ==
     output of dmesg related "ata" Ubuntu v13.04 mini.iso ( with boot parameter reserve=0x1f0, 0x8)
    ==
     see later ( in "good situation" example  )
    ~~
    ===
    Disable legacy ATA driver by adding the following to kernel command line in /boot/grub/menu.lst:
    reserve=0x1f0, 0x8
    . (This option reserves this I/O region and prevents ata_piix from loading).
    ==
     See output of dmesg related "ata" Ubuntu v13.04 mini.iso ( with boot parameter reserve=0x1f0, 0x8) :
    ~~
    [ 0.176027] 
    libata version 3.00 loaded.
    [ 0.713319] 
    ata_piix 0000:00:07.1: version 2.13
    [ 0.713397] 
    ata_piix 0000:00:07.1: device not available (can't reserve [io 0x0000-0x0007])
    [ 0.713404] 
    ata_piix: probe of 0000:00:07.1 failed with error -22
    [ 0.713474] 
    pata_acpi 0000:00:07.1: device not available (can't reserve [io 0x0000-0x0007])
    [ 0.713479] 
    pata_acpi: probe of 0000:00:07.1 failed with error -22
    ~~
      As result: 1) IDE disk handled by hv_storvsc , but 2) no CD-ROM device
    ==
    ~ # blkid
    /dev/sda1: LABEL="ARCH_BOOT" UUID="009c2043-4bl7-4f95-al4d-fb8951f95b5d" TYPE="ext2"
    ==
    ~~
    VVM>>
    VVM>>Q1: Output of blkid contain duplicate UUID ?
    VVM>>
    -> blkid contains duplicate UUID, below are the output.
    ~~
     This situation is classic problem "
    use hv_storvsc instead of ata_piix to handle the IDE disks devices ( but not for the DVD-ROM / CD-ROM device handling)
    ~~
     For compare, see example "good situation": 
     See output of dmesg related "ata" Ubuntu v13.04 mini.iso ( without boot parameter reserve=0x1f0, 0x8) :
    ~~~~
    ~ # dmesg |grep ata
    [ 0.167224] libata version 3.00 loaded.
    [ 0.703109] ata_piix 0000:00:07.1: version 2.13
    [ 0.703267] ata_piix 0000:00:07.1: Hyper-V Virtual Machine detected, ATA device ignore set
    [ 0.703339] ata_piix 0000:00:07.1: setting latency timer to 64
    [ 0.704968] scsi0 : ata_piix
    [ 0.705713] scsi1 : ata_piix
    [ 0.706191] atal: PATA max UDMA/33 cmd 0xlf0 ctl 0x3f6 bmdma 0xffa0 irq 14
    [ 0.706194] ata2: PATA max UDMA/33 cmd 0x170 ctl 0x376 bmdma 0xffa8 irq 15
    [ 0.868844] atal.00: host indicates ignore ATA devices, ignored
    [ 0.869142] ata2.00: ATAPI: Virtual CD, , max MWDMA2
    [ 0.871736] ata2.00: configured for MWDMA2
    ~~~~
    ===
    ~ # uname -a
    Linux ubuntu 3.7.0-7-generic #15-Ubuntu SUP Sat Dec 15 14:13:08 UTC 2012 x86_64 GNU/Linux
    ~ # lsmod
    hv_netvsc 22769 0
    hv_storvsc 17496 3
    hv_utils 13569 0
    hv_vmbus 34432 3 hv_netvsc,hv_storvsc,hv_utils
    ~ # blkid
    /dev/sr0: LABEL=”CDROM" TYPE="iso9660”
    /dev/sda1: LABEL="ARCH_BOOT" UUID="009c2043-4bl7-4f95-al4d-fb8951f95b5d" TYPE="ext2"
    ===
     ( only CD-ROM and 1( one) IDE disk connected to ATA)
    ~~
    regarding ata_piix.c patch . . .
    As far as i understand this patch , it ignore ATA devices on Hyper-V when PV drivers(CONFIG_HYPERV_STORAGE=y) are enabled.
    ~~
     Yes:
    ignore ATA-HDD ( but not ignore ATA CD-ROM )  on Hyper-V when PV drivers(CONFIG_HYPERV_STORAGE=y) are enabled.
    ~
     this patches need be backported:
      cd006086fa5d ata_piix: defer disks to the Hyper-V drivers by default
    and its prerequisite
      db63a4c8115a libata: add a host flag to ignore detected ATA devices
    ~
    ~~
    P.S.
     Are You do this:
    ==
    As temporary solution, increase on 1-2 Gb size all .vhd connected to IDE bus
    ( but not increase size of partitions inside disks)
    ==
    ? fsck write message a-la: "no error in file system" ?
    2013-01-24 Answer by Ujjwal Kumar: As a temporary solution looks ok for me, but [ VVM: need true solution ]
    P.P.S.
    To Ujjwal Kumar :
     My e-mail:
    ZZZZZZZZZZZZZZZ
    please send e-mail to me,  in reply I send to You patches to ata_piix ( and *.c before and after patches) , etc.
    } on 2013-01-14 -- DoNe

  • Error: "The user for which we are checking a privilege should be in the same org as the context provided"

    Hi All,
    Recently, we've encountered some weird error for some users when trying to assign records to them through both the CRM UI and CRM SDK Call.
    The error message saying: "The user for which we are checking a privilege should be in the same org as the context provided".
    Here is the trace log for assigning a lead for one of those users (same error for other records):
    [2010-08-09 13:58:06.0] Process: w3wp |Organization:d905ae4d-8d9f-df11-a1b0-00237df0351e |Thread:   22 |Category: Exception |User: fb56b107-949f-df11-a1b0-00237df0351e |Level: Error | CrmArgumentException..ctor
    at CrmArgumentException..ctor(String message)
    at SecurityLibrary.TryCheckPrivilege(Guid user, Guid privilege, ExecutionContext context)
    at SecurityLibrary.CheckPrivilege(Guid user, Guid privilege, ExecutionContext context)
    at SecurityLibrary.CheckPrivilege(Guid user, EntityMetadata metadata, PrivilegeType type, ExecutionContext context)
    at CascadeEngine.AssignDB(BusinessEntityMoniker moniker, SecurityPrincipal assignee, ExecutionContext context)
    at RuntimeMethodHandle._InvokeMethodFast(Object target, Object[] arguments, SignatureStruct& sig, MethodAttributes methodAttributes, RuntimeTypeHandle typeOwner)
    at RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture, Boolean skipVisibilityChecks)
    at RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
    at LogicalMethodInfo.Invoke(Object target, Object[] values)
    at InternalOperationPlugin.Execute(IPluginExecutionContext context)
    at PluginStep.Execute(PipelineExecutionContext context)
    at Pipeline.Execute(PipelineExecutionContext context)
    at MessageProcessor.Execute(PipelineExecutionContext context)
    at InternalMessageDispatcher.Execute(PipelineExecutionContext context)
    at ExternalMessageDispatcher.Execute(String messageName, Int32 primaryObjectTypeCode, Int32 secondaryObjectTypeCode, PropertyBag fields, CorrelationToken correlationToken, CallerOriginToken originToken, UserAuth userAuth, Guid callerId)
    at RequestBase.Process(Int32 primaryObjectTypeCode, Int32 secondaryObjectTypeCode, CorrelationToken correlationToken, CallerOriginToken originToken, UserAuth userAuth, Guid callerId)
    at RequestBase.Process(CorrelationToken correlationToken, CallerOriginToken originToken, UserAuth userAuth, Guid callerId)
    at CrmServiceInternal.Execute(RequestBase request, CorrelationToken correlationToken, CallerOriginToken originToken, UserAuth userAuth, Guid callerId)
    at InProcessCrmService.Execute(Object request)
    at PlatformCommand.ExecuteInternal()
    at AssignRouteOnCreateUpdateListener.AssignEntity(Entity entity, LookupValue owner)
    at CommunicationListener.HandlePostEvent(PlatformCommand command, Response response)
    at PlatformCommand.ExecuteInternal()
    at UpdateCommand.Execute()
    at EntityProxy.Update(Boolean performDuplicateCheck)
    at AppForm.HandleFormEventAssign(Boolean gridRefreshCallbackAdded)
    at AppForm.RaiseDataEvent(FormEventId eventId)
    at EndUserForm.Initialize(Entity entity)
    at CustomizableForm.Execute(Entity entity, String formType)
    at LeadDetailPage.ConfigureForm()
    at AppUIPage.OnPreRender(EventArgs e)
    at Control.PreRenderRecursiveInternal()
    at Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
    at Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
    at Page.ProcessRequest()
    at Page.ProcessRequest(HttpContext context)
    at sfa_leads_edit_aspx.ProcessRequest(HttpContext context)
    at CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
    at HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
    at ApplicationStepManager.ResumeSteps(Exception error)
    at HttpApplication.System.Web.IHttpAsyncHandler.BeginProcessRequest(HttpContext context, AsyncCallback cb, Object extraData)
    at HttpRuntime.ProcessRequestInternal(HttpWorkerRequest wr)
    at HttpRuntime.ProcessRequestNoDemand(HttpWorkerRequest wr)
    at ISAPIRuntime.ProcessRequest(IntPtr ecb, Int32 iWRType)
    >Crm Exception: Message: The user for which we are checking a privilege should be in the same org as the context provided, ErrorCode: -2147220989, InnerException: System.ArgumentException: The user for which we are checking a privilege should be in the same
    org as the context provided
    I checked the user id and the organization id, and there are both correct (in the database). The user id "fb56b107-949f-df11-a1b0-00237df0351e " is actually the internal CRM System User.
    What could the issue be?
    Can anyone help, please. Thanks

    Are you sure, the User which you are assigning is in the same organisaion. It seems that the Orgname which you are specifying is not correct. and the web service is pointing to other user which is not the current ms crm organisaion.
    Could you please paste your code here for more details.?
    Thanks, Ranjitsingh R | http://mscrm-developer.blogspot.com/ | MS CRM Consultant

  • [SOLVED]Root Privilege Command in Openbox Menu

    This is my first post as a arch user, and I just thought I would start by saying hi!!!
    Anyway, I have recently moved from CrunchBang linux 9.04 to Arch linux.  I have setup an openbox session as my default.  I have gotten everything to work so far except for one thing:
    Lets say you something to the openbox menu, like gparted.  Gparted requires root privilege to run.  Under ubuntu/debian, I would simply use "gksu gparted" as the command because that would prompt me for the password and then run the program.  I am not aware of any way to do such a thing in arch linux.  Is there a simple way to do this?
    -thanks
    Last edited by Dr Belka (2010-04-04 17:54:48)

    You're in Arch country now, boy. You want fancy gksu, you pacMAN up and install it.
    Also note gksu comes with gksudo so you can use your password rather than roots - assuming you're in the sudoers file.
    Last edited by Mardoct (2010-04-04 17:53:15)

  • Requirement is to run CMD.EXE under the Local System Account. So that we can map a network drive to be used by a windows service, which will be created by command: - net use z: \\servername\sharedfolder /persistent:yes

    Environment:
    OS:  Windows 7 32/64 bit, Windows 2008 Server 64
    bit/ Windows 2012 Server 64 bit
    Priority:
    - Critical
    Requirement: - Since
    the Windows Service is running under the Local System Account, we would like to emulate this same behaviour.
    Basically, we would like to run CMD.EXE under the Local System Account. So that we can map a network drive to be used by a service using following
    command
    net use z: \\servername\sharedfolder /persistent:yes.
    Already Attempt:
    We tried to launch the CMD.exe using the DOS Task Scheduler AT command.  Here’s a sample command:
    AT 10:36 /interactive cmd.exe
    But I received a warning that “due
    to security enhancements, this task will run at the time excepted but not interactively.”
    It turns out that this approach will work for XP, 2000 and Server 2003 but due to session isolation
    Interactive services no longer work on Windows 7, Windows Server 2008 and above.
      2.  We
    tried to create a secondary Windows Service via the Service Control (sc.exe) which merely launches CMD.exe.
    <Drive>:\sc create RunCMDAsLSA binpath= "cmd" type=own type=interact <Drive>:\sc
    start RunCMDAsLSA
    In this case the service fails to start and results it the following error message:
    FAILED 1053: The service did not respond to the start or control request in a timely fashion.
      3. One
    suggestion, we found to launch CMD.exe via a Scheduled Task, but
    it is not giving any option to launch CMD.exe in interactive mode; so that I can map network drive using net command.
      4. I read an article, which
    demonstrates the use of PSTools from SysInternals. I launched the command line and executed following command
    psexec -i -s cmd.exe
    PSTools worked fine, but It seems that in scope of Sysinternals Software License
    Terms. You may not "use the software for commercial software hosting services."
    Application will deploy on client, which will be like commercial,
    so we are not able to use PSTools.         
    Kindly assist us for achieving the requirement. We have tried all the ways, but nothing is working for us. Kindly suggest.
    I will be really thankful.

    Hi Sir,
    Nothing worked from above for us. You can see our remarks on posted query.
    That’s why, we posted on forum.
    And there will not be any vulnerability, because, if we will use "net
    use ..."
    in network domain; definitely,
    we will provide username and password of mapped drive system.
    And, that system, itself is given by client; so that, there must not be any vulnerability; they are ready to provide user name and password.
    We need a way; by which we can complete the requirement. Kindly assist.
    Regards,
    S. P. Singh

  • "Command-i" which was so useful in being able to selectively delete messages from the servers no longer works. Is their a replacement? Will it be fixed? Or should I change my mail application?

    "Command-i" which was so useful for selectively deleting messages from servers has disappeared in  Maverick. I wonder if it has been replaced by something else or should I look into other mail applications.

    Hmmm.  Which Mail program are you referring to?
    in Mac Mail command -i used to bring up the Account info pane on the server  (10.8.5)
    Now it seems you have to use the gear at the bottom in "Mail Activity" to get the drop down (10.9) :

  • What command would you use to check for allocation, structural, or logical integrity problems?

    What command would you use to check for allocation, structural, or logical integrity problems?

    Wondering if you are looking for DBCC CHECKDB command? For more information, on that command, try to look at this:
    http://technet.microsoft.com/en-us/library/ms176064.aspx

  • Background and foreground colors can be interchanged using which command

    hi
    background and foreground colors can be interchanged using which command

    <b>Background and foreground colors can be interchanged using the command Format Inverse.</b>

  • Hey,i forgot my login password,so i changed the password by using terminal command(reset password).now i have new user name with new password,but i can't find  my data which i have saved on mac.please help me out in this matter.

    hey,i forgot my login password,so i changed the password by using terminal command(reset password).now i have new user name with new password,
    but i can't find  my data which i have saved on mac.the storage is showing data used and free space on the disk
    please help me out in this matter.

    How did you change your user name?
    resetpassword wouldn't have done it. If you managed to create a new user, then your data is still in the old account.

  • How to check which table is used

    After creating RFQ , i want to check which table is used  in creating RFQ.
    how can i see that data has gone or not into the database table.

    Hi
    See the Table EKKO and EKPO only
    with EKKO-BSTYP = A
    Regards
    Anji

Maybe you are looking for