topic Re: sudo problem in Operating System - HP-UX

sudo problem

DeafFrog — Tue, 03 Mar 2009 14:26:11 GMT

here's what /usr/local/etc/sudoers file for machine looks like :
Cmnd_Alias ADMINS=/usr/sbin/useradd
root ALL=NOPASSWD:ALL
%sysadmin ALL=NOPASSWD:ALL
%oper ALL=NOPASSWD:ALL
~
user1 root=NOPASSWD:ADMINS

But here's what i am getting ....
$ whoami
user1
$ /usr/sbin/useradd -g general -m user2
Permission Denied
....i have tried googling ...but not working.

Re: sudo problem

Patrick Wallek — Tue, 03 Mar 2009 14:30:12 GMT

You have to actually use the 'sudo' command in order to get permissions.

$ sudo /usr/sbin/useradd -g general -m user2

Re: sudo problem

Avinash20 — Tue, 03 Mar 2009 14:30:55 GMT

You need to use sudo before /usr/bin/useradd

Re: sudo problem

Avinash20 — Tue, 03 Mar 2009 14:32:37 GMT

/opt/sudo/bin/sudo /usr/sbin/useradd [options]

Re: sudo problem

Avinash20 — Tue, 03 Mar 2009 14:33:44 GMT

Also refer to the following thread

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=997812

Please assign points to this threads !!

Re: sudo problem

DeafFrog — Tue, 03 Mar 2009 14:37:11 GMT

Thanks Patrick ,

$ /usr/local/bin/sudo /usr/sbin/useradd -g general -m user2

We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these three things:

#1) Respect the privacy of others.
#2) Think before you type.
#3) With great power comes great responsibility.

Password:
Sorry, try again.
Password:
Sorry, try again.
Password:
..................and the passwd is correct.

Re: sudo problem

Avinash20 — Tue, 03 Mar 2009 14:42:41 GMT

Try less than 8 char password

Re: sudo problem

Patrick Wallek — Tue, 03 Mar 2009 14:45:12 GMT

What password are you using?

The password you use is the password of the ID you are logged in as. In this case the password of user1.

Re: sudo problem

DeafFrog — Tue, 03 Mar 2009 14:50:32 GMT

Thanks Avinash and Patrick ,

I ahve tried both the passwd , for uer1 and root .not the mesasage is
Last successful login for user1: Tue Mar 3 18:17:31 oman-4 2009
Last unsuccessful login for user1: Tue Mar 3 18:46:50 oman-4 2009 on pts/0
user1 is not allowed to run sudo on mwdev1. This incident will be reported.
.....the system is trusted.

Re: sudo problem

Avinash20 — Tue, 03 Mar 2009 15:07:03 GMT

You have not defined the parameter in visudo correctly.

Re: sudo problem

Avinash20 — Tue, 03 Mar 2009 15:08:52 GMT

user1 root = NOPASSWD :/usr/bin/useradd

Try and let me know

Re: sudo problem

Avinash20 — Tue, 03 Mar 2009 15:10:09 GMT

Also ensure to check what privileges you are having via
sudo -l

Re: sudo problem

Tingli — Tue, 03 Mar 2009 15:14:21 GMT

I am not sure....

It seems that you don't need to use password for the whole thing.

Maybe you can try:

sudo -u root -c "/usr/sbin/useradd -g general -m user2"

Re: sudo problem

DeafFrog — Tue, 03 Mar 2009 15:15:36 GMT

Dear Avinash ,

I have always assigned points , you can look into profile.I think i have to get the user1 account enabled in sudo now .....there's the message......Last unsuccessful login for user1: Tue Mar 3 18:46:50 xyz-4 2009 on pts/0
user1 is not allowed to run sudo on xyz. This incident will be reported.

Re: sudo problem

DeafFrog — Tue, 03 Mar 2009 15:51:11 GMT

Tingli : your suggested command showed problem in syntax
Avinash : after , user1 root = NOPASSWD :/usr/bin/useradd : problem persists

Re: sudo problem

Tingli — Tue, 03 Mar 2009 16:06:08 GMT

Take away the "-u root".

Also, did you create the sudoers file by visudo, which will check the syntax of the file?

Re: sudo problem

Avinash20 — Tue, 03 Mar 2009 16:14:03 GMT

Refer
http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=997812

Re: sudo problem

DeafFrog — Tue, 03 Mar 2009 16:18:00 GMT

Yes Tingli , i have created that via visudo ,
i have alredy posted above the content of that file above .
here's o/p of sudo -v
/usr/local/bin/sudo -v
Sorry, user user1 may not run sudo on xyz.

Re: sudo problem

DeafFrog — Tue, 03 Mar 2009 16:23:12 GMT

Avinash ,the thread you posted suggested restricted sam as option.But there has to be a solution to this , i have tried setting up RBACK also ...may be towmarrow will be a good day

Re: sudo problem

Avinash20 — Tue, 03 Mar 2009 16:27:45 GMT

"the thread you posted suggested restricted sam as option"

I wanted you to check only the first two notes in the thread