topic Re: problem in sudo in Operating System - HP-UX

problem in sudo

prasadb — Wed, 16 Jul 2008 10:17:28 GMT

hello experts,

i have a HP-UX machine, B.11.11. i want to give some users the sudo priviledges to root. But its not working..

here is the entry for the ready reference

# User alias specification

User_Alias SHIFT=shiftopr

# User privilege specification

SHIFT PROD=SHELL

But when i sudo sh by the user shiftopr, then it give this error :

$ sudo sh
Password:
shiftopr is not in the sudoers file. This incident will be reported.

why this error, when i have made the proper entry in /opt/sudo/etc/sudoers/sudoers file

kindly help

Re: problem in sudo

amipankaj — Wed, 16 Jul 2008 10:30:05 GMT

hi prashad,

i think you should give no_passwd opsion in sudoers file for the user.

thanks,
roy

Re: problem in sudo

Rasheed Tamton — Wed, 16 Jul 2008 11:04:08 GMT

Hi,

Is /opt/sudo/etc/sudoers/sudoers the correct path for the sudoers. May be you have to link as /etc/sudoers.

ln -s /opt/sudo/etc/sudoers/sudoers /etc/sudoers
Did you use visudo, when you edit the file.

rgds.

Re: problem in sudo

Rasheed Tamton — Wed, 16 Jul 2008 11:41:11 GMT

There is no command alias in your sudoers file. Type sudo only at the prompt. Do you get anything.

what output sudo -l gives?
Change /etc/sudoers for testing to
User_Alias SHIFT=shifto
SHIFT ALL= /bin/su
then type at the cmd prompt
sudo su

or

User_Alias SHIFT=shifto
SHIFT ALL= /bin/sh
then type at the cmd prompt
sudo sh

rgds.

Re: problem in sudo

Ralph Grothe — Wed, 16 Jul 2008 11:44:21 GMT

From the sample definitions given it cannot be seen what SHELL for instance defines.
Logged in as user shiftopr you should be able to execute "sudo -l" and be given a list of commands the user is allowed to run through sudo.
Note, you should never edit the sudoers file directly but use the frontend command visudo exclusively.

Re: problem in sudo

prasadb — Fri, 18 Jul 2008 05:30:38 GMT

what i found is that there are different locations of sudoers file...like

in most of my servers i found sudoers file at

/opt/sudo/etc/sudoers

whereas in some it was at /usr/local/sbin

and in some it resides at /etc/sudoers..

i don't know why it is so..but the best way to remove the confusion is, i guess is to fire

# whereis visudo
visudo: /opt/sudo/sbin/visudo /opt/sudo/man/man1m/visudo.1m

i got this path..and in some servers it is

/usr/local/sbin/visudo

the problem is resolved now..i will close this thread at the end of the day. meanwhile i would definitely like to listen from you all experts something more & interesting, if you have any to inform

Thanks all...

Re: problem in sudo

Kenan Erdey — Fri, 18 Jul 2008 05:50:30 GMT

don't care sudoers place. don't edit via vi.just type visudo.

please not that sudo sh keeps users' environment.
sudo su - changes environent to root.