topic Re: Sudo issues in Operating System - HP-UX

Sudo issues

amipankaj — Thu, 29 Jan 2009 12:47:37 GMT

Hello Experts,

i have one problem with sudoers file. i have three user john, paull, vrao i wanted these users can become user mark. for that, i had added following lines in sudoers file.

User_Alias SABADEVS = john, paul, vrao
Runas_Alias SABA = mark
SABADEVS ALL = (SABA) NOPASSWD:ALL

but its not working....asking for password while trying to switch to user mark from these three users.

thanks in adance.
Roy

Re: Sudo issues

Frank de Vries — Thu, 29 Jan 2009 13:13:49 GMT

I see you use :ALL
but to change user you need
"su - mark "

Did you try to narrow just for su ?

Cmnd_Alias SU = /usr/bin/su
SABADEVS ALL = (SABA) NOPASSWD:SU

Or alternatively does it work just
plain SU (for everyone to start)

User_Alias SABADEVS = john, paul, vrao
Cmnd_Alias SU = /usr/bin/su
SABADEVS ALL = (SABA) NOPASSWD:SU

Re: Sudo issues

killer1 — Thu, 29 Jan 2009 13:24:30 GMT

Hello Roy

Please try the following syntax.

User_Alias SABADEVS = john, paul, vrao
SABADEVS ALL = NOPASSWD:/usr/bin/su - mark

Regards

Re: Sudo issues

Matti_Kurkela — Thu, 29 Jan 2009 13:37:24 GMT

If your users are using the "sudo su - mark" construct, they're effectively asking sudo to allow them to become root so that su can switch them to mark without asking for a password. Your sudo configuration does not allow that.

With the rules you have specified, your users should use "sudo -u mark -i". It achieves the same result as "sudo su - mark", but in a different way.

MK

Re: Sudo issues

amipankaj — Thu, 29 Jan 2009 13:41:51 GMT

Thanks guys....its working now.