topic Re: sudo problem in Operating System - HP-UX

sudo problem

Todd McDaniel_1 — Tue, 16 May 2006 10:05:01 GMT

I have an issue with sudo where a user gets this error.

"user NOT authorized on host"

Not exactly sure what that means, the user has access to the box and I have given them sudo permission to run the commands in /etc/sudoers.

Re: sudo problem

A. Clay Stephenson — Tue, 16 May 2006 10:14:59 GMT

Look at the Host_Alias entries in your /etc/sudoers file.

Re: sudo problem

A. Clay Stephenson — Tue, 16 May 2006 10:15:53 GMT

Look at the Host_Alias and User_Alias entries in your /etc/sudoers file.

Re: sudo problem

Jeff Schussele — Tue, 16 May 2006 10:16:04 GMT

Hi Todd,

The command *must* be exactly what the user types. You can use wildcards, but the path & actual command must match that pattern.
Also most sudo rules apply to group perms so make sure the user is effectively in the proper group - i.e. if they're a member of several, they are presently in the proper one or you've set up netgroups to give them rights to all.

HTH,
Jeff

Re: sudo problem

Arunvijai_4 — Tue, 16 May 2006 10:33:32 GMT

Hi,

Perhaps, this could help http://www.ussg.iu.edu/UAU/advcomm/sudoers

-Arun

Re: sudo problem

Todd McDaniel_1 — Tue, 16 May 2006 10:38:21 GMT

So far as I know, We have never used any alias of any type.

I have the full path in the entry but with no options, that should give them the access to run it with any options they choose.

The user is only in one group.

Re: sudo problem

Jeff Schussele — Tue, 16 May 2006 10:51:49 GMT

OK - I suspect it's in the sudoers file itself - section should look like:

User_Alias SUDO_NAME = %group_name1, %group_name2
Cmnd_Alias SUDO_CMD_NAMES = \
/path/to/first/command, \
/path/to/second/commnd, \
/path/to/final/command
SUDO_NAME ALL = (root) SUDO_CMD_NAMES

Note the need for commas after group definitions & commas/backslashes as well after all but the last command and the actual definitions at the end of the section.

It's easy to miss one of these.

HTH,
Jeff

Re: sudo problem

Todd McDaniel_1 — Tue, 16 May 2006 11:07:26 GMT

This is the format we have used for a long time and I have never had an issue with it.

user1 ALL=(ALL) NOPASSWD:/path/to/command

Re: sudo problem

Darrel Louis — Tue, 16 May 2006 16:01:56 GMT

Todd,

Are you sure that there are no duplicate user-id's in your passwd or group file.
Does your syntax work for another user?

Can you do the following:
- id
- pwck
- grpck

Darrel

Re: sudo problem

Bill Hassell — Tue, 16 May 2006 16:22:57 GMT

Check for duplicate IDs with:

logins -d