Implementation Guide › Installing and Customizing a UNIX Endpoint › Customizing CA Access Control › sesu and sepass Utilities › Use the Wrapper Script to Run sepass

Use the Wrapper Script to Run sepass

Using the wrapper scripts to run the sepass utility lets you run it on operating systems where it does not work when CA Access Control is not loaded.

Note: You only need to follow this procedure if the sepass utility does not run when CA Access Control is not loaded.

To use wrapper scripts to run sepass

1. Open the sepass_wrap.sh script in a text editor.

   The wrapper script displays in the text editor.

2. If necessary, change the following two variables:

   SEOSDIR

   Defines the CA Access Control installation directory. By default, this is set to the default installation directory:

   /opt/CA/AccessControl 
   

   SYSPASSWD

   Defines the name of the original sepass system binary that you need to replace. By default, this is set to:

   /usr/bin/passwd.orig
   

3. Replace the passwd symbolic link to point to the sepass_wrap.sh wrapper script rather than to the sepass utility.

   Whenever you run passwd, the sepass wrapper script runs the sepass utility.