Re: howto delegate user administration to non-root account?

[Paul Johnson <baloo@ursine.dyndns.org>]

<#secure method=pgp mode=sign>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Gebhardt Thomas <gebhardt@hrz.uni-marburg.de> writes:

> it is possible to delegate the adding and removing of users to a
> non-root account without getting too much security hassle?
> (no alteration of system accounts possible, ...)

Yup.

> If so, is there an easy established/preferred/canonical way to do this?

I believe sudo is probably what you're looking for.  Other people
might be able to speak up about specific configurations needed to
facilitate limiting user ability to just adduser/deluser.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBQKjEUzgNqloQMwcRAmuGAKDlhnA8ZE9e4sh6OwucZgH2jBFTRQCfdtYN
NxwxVy12l1P01RpC7kf11ow=
=FwTg
-----END PGP SIGNATURE-----