I've been playing around with a Solaris 11 system, where I've made several user-accounts for myself. Anyway, I gave one of my unprivileged account the solaris.*
auth, and then tried to give another unprivileged account the System Administrator
profile:
user$ auths solaris.* user$ pfexec usermod -P"+System Administrator" user2
This failed with the following error-message (yes, repeated three times):
/usr/lib/passmgmt: Password file(s) busy. Try again later /usr/lib/passmgmt: Password file(s) busy. Try again later /usr/lib/passmgmt: Password file(s) busy. Try again later
I've "tried again later" - even after just rebooting - and each time I've get the same result. This is a completely different error than when a user without the solaris.*
(or one of the assign
-auths) tries the command.
I've also tried to explicitly add auths regarding assigning profiles, auths and roles - eg. solaris.profile.assign
- in addition to solaris.*
(like how solaris.grant
had to be explicitly assigned); but that didn't help (nor show up when I did a auths
- only solaris.*
showed).
I have however successfully used usermod
to assign these things while root or while using a user with the Primary Administrator profile (I copy-pasted in from a previous Solaris-version).
However I really thought solaris.*
- or for that matter just the solaris.profile.assign
- ought to have been enough to use usermod
to give privileges to other users...
So what does the (triple) error-message mean? Why doesn't it work? And if it shouldn't work, why not? And what would be the correct "least" combination of auths and/or profiles to make it work?