We recommend that you use sepass instead of the operating system's passwd command and sesu instead of the su command. To do this, you need to save the original system binaries and replace them with symbolic links to sepass and sesu respectively. Once this is done, you need to make sure you can always use these utilities.
On most operating systems, the sepass and sesu utilities run even when CA Access Control is not loaded. However, on some operating systems (for example, AIX) these utilities do not work when CA Access Control is not loaded. For these operating systems, CA Access Control provides wrapper scripts.
| Copyright © 2012 CA. All rights reserved. | Tell Technical Publications how we can improve this information |