topic Re: Sudo and NIS in Operating System - HP-UX

Sudo and NIS

IRI Unix Support Team — Thu, 09 May 2002 21:24:29 GMT

Hi, I have a particular problem with how sudo works with NIS passwords. On an HPUX 11.i system with the latest ver of sudo, I cannot get it to pick up the NIS password for an NIS users. However, sudo will work if the NIS user is actually locally added with password to /etc/passwd. Any ideas on how I can address this since it would force me to install users locally just to get sudo to "find" their password and thus let them pass.Thanks!

Re: Sudo and NIS

Patrick Wallek — Thu, 09 May 2002 21:56:30 GMT

sudo and NIS should work together without any problems.

Are your users able to get into the system otherwise?

Do you have an entry like:

+::0:0::::

as the last entry in the /etc/passwd file?

Are you getting any other errors when you try to use sudo?

Re: Sudo and NIS

S.K. Chan — Thu, 09 May 2002 22:37:39 GMT

Not an expert in sudo here but I think it has something to do with how you configure your /etc/sudoers file. Do a ..
# man sudoers
for details. It may/may-not be it.

Re: Sudo and NIS

IRI Unix Support Team — Fri, 10 May 2002 15:37:36 GMT

Yes, I have an entry for the particular user id, seddm, as +seddm:-2:-2:::, but I tried to put in the token at the end also, +:0:0:::. Still doesn't work. It prompts 3 times for id and then kicks me out. I also tried to setup a special group in /etc/group and then added the following entry to sudoers: %sudoadm, and that doesn't work either. I also added the following to the nsswitch.conf file: passwd files [NOTFOUND=continue] nis, but that didn't work either. It really makes no sense. I'm thinking that there might be some config.h definition that needs to be turned on when I originally compiled sudo, but there's nothing obvious in the config.h file. Thanks!

Re: Sudo and NIS

Giri Sekar — Mon, 13 May 2002 14:54:00 GMT

Hi:

I would do this additionally.

# odump -sllibload sudo
and look into the shared library load list and make sure the sudo program is linked with those libraries.

Thanks
Giri.