RE: Hearing the truth??

Brennan,
The piece of information missing is what name service you guys use.
That is, what is the source for user account information.  For Solaris,
this usually means one or more of the following:  local files (the
default), NIS, NIS+, and LDAP.  Since each of these services is pretty
unique, the procedure for creating/removing users will be pretty
different for each.

The short answer is that there are indeed tools to manipulate user
accounts for all of these name services.  Sun themselves have GUI tools
for all of them.  There are 3rd party tools as well.

For simple Unix account management, based on local files, the useradd
and userdel commands are command-line utilties for creating/removing
user accounts.

HTH,
Jonathan

The opinions expressed here are mine alone and not those of my employer.
  

> -----Original Message-----
> From: OBrien, Brennan [mailto:[email protected]]
> Sent: Tuesday, February 17, 2004 8:22 PM
> To: [email protected]
> Subject: Hearing the truth??
> 
> 
> All:
> 
> I've got an interesting situation at the office I could use 
> some advice
> on.  I'm being asked from a security perspective whether the following
> statement (made by our Unix admins) could be considered true:
> 
> "The only way you can delete a user account on a unix 
> environment is to
> write a series of scripts to eliminate file associations."
> 
> So, while I don't disagree with the logic, is this actually the case
> that there are no commercial tools available to assist in this arena,
> and the only method of deleting a user on a system safely and
> effectively is to write a bunch of scripts on your own?  This 
> just begs
> to be a problem solved by a commercial entity if it's 
> actually the case.
> 
> 
> We're in a Sun environment. Some thoughts would be appreciated. 
> 
> Brennan
> 
> 
>