topic Re: Sudo - Cmnd_Alias errors in Operating System - HP-UX

Sudo - Cmnd_Alias errors

CRollins — Mon, 17 Sep 2007 14:56:54 GMT

I'm setting up the sudoers file for USR1 to run the PROCESSLOADS commands as USR2. I'm getting syntax errors on Cmnd_Alias. Is there something wrong with this syntax? It looks right. This is driving me nuts. Please help. I would also like to add the NOPASSWD option to the user speicification but I want to get these piece working first.

@line 13 ->

Cmnd_Alias PROCESSLOADS=cp,ls

@line 32 ->

USR1 ALL=(USR2) PROCESSLOADS

>>> sudoers file: syntax error, line 13 <<<
Warning: undeclared Cmnd_Alias `PROCESSLOADS' referenced near line 32

Also there isnt an /etc/sudoers file default upon installation. The default path when using visudo is /usr/local/etc/sudoers.tmp. Do I need to create /etc/sudoers?

Thanks!!

Re: Sudo - Cmnd_Alias errors

Jeff_Traigle — Mon, 17 Sep 2007 15:32:38 GMT

You must include full path for the commands in the alias.

Cmnd_Alias PROCESSLOADS = /usr/bin/cp, /usr/bin/ls

Re: Sudo - Cmnd_Alias errors

Steven E. Protter — Mon, 17 Sep 2007 15:35:59 GMT

Shalom,

I'm guessing you are using sudo from Internet Express. It keeps the sudoers file in the /opt filesystem.

SEP

Re: Sudo - Cmnd_Alias errors

AwadheshPandey — Tue, 18 Sep 2007 03:27:03 GMT

use visudo command, it will open sudoers file for you. Use full path of cammand.
# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the man page for the details on how to write a sudoers file.
#

# Host alias specification

# User alias specification
User_Alias
# Cmnd alias specification
Cmnd_Alias
# User privilege specification

Re: Sudo - Cmnd_Alias errors

Aussan — Tue, 18 Sep 2007 09:06:14 GMT

you need the full path for cp and ls

Cmnd_Alias PROCESSLOADS = /usr/bin/cp,/usr/bin/ls

USR1 ALL = (USR2) PROCESSLOADS

also my sudoers didn't like it when i did not have spaces between the = the user ..etc

i don't know why but you might want to try that also

Re: Sudo - Cmnd_Alias errors

Aussan — Tue, 18 Sep 2007 09:07:16 GMT

you need the full path for cp and ls

Cmnd_Alias PROCESSLOADS = /usr/bin/cp,/usr/bin/ls

USR1 ALL = (USR2) PROCESSLOADS

for the /etc/sudoers, it should be created once you save the file, if not just create a link to the original file

Re: Sudo - Cmnd_Alias errors

CRollins — Tue, 18 Sep 2007 12:08:44 GMT

I added the full path and im getting the same error. I used ls and cp as the example but its actually an executatble for the application. I'm giving the application person access to run their processes. The file has execute permission on the file, yet Cmnd_Alias is still giving undeclared alias errors.

Re: Sudo - Cmnd_Alias errors

CRollins — Tue, 18 Sep 2007 12:19:53 GMT

ok - i fixed that but its ignoring the NOPASSWD switch.

user

USERNAMEGROUP ALL=(user2) NOPASSWD: COMMANDVAR