topic Re: shadow and sudo (passwd authentication) in Operating System - HP-UX

shadow and sudo (passwd authentication)

Sunny Jaisinghani — Tue, 10 Feb 2009 11:05:50 GMT

Hello All,

I have installed shadow software on my 11.11 box

# PHCO_27035 1.0 shadow.h cumulative patch
# ShadowPW B.11.11.03 HP-UX 11.11 Shadow Password Enablement Product
ShadowPW.SHADOW B.11.11.03 Shadow Password Enablement
ShadowPW.SHADOW-MAN B.11.11.03 Shadow Password Enablement Man Pages

The sudo version installed on this server is

Sudo version 1.6.3p7
Authentication methods: 'passwd' 'secureware'

When i do sudo su - my password does not accepted. It says wrong password. However; my passowrd works during login

So my doubt is

Do shadow and sudo(passwd authentication) work together?

Or i will have to change the authentication to PAM

Thanks
Sunny

Re: shadow and sudo (passwd authentication)

Steven E. Protter — Tue, 10 Feb 2009 11:10:14 GMT

Shalom,

sudo is fully compatible with shadow password authentication.

I have used it on Linux and HP-UX shadowed systems.

I would have shadow installed and working prior to installing sudo, but that is probably not strictly necessary.

SEP

Re: shadow and sudo (passwd authentication)

Sunny Jaisinghani — Tue, 10 Feb 2009 11:15:28 GMT

sudo with passwd authentication was working fine before we had installed shadow.

After installing shadow; sudo without passwd authentication works fine but not with passwd authentication

Can you suggest any action

Re: shadow and sudo (passwd authentication)

Dennis Handly — Tue, 10 Feb 2009 12:22:41 GMT

Do you have any passwords that have more than 8 chars? Without trusted/shadow, any beyond 8 were ignored.

Re: shadow and sudo (passwd authentication)

Sunny Jaisinghani — Tue, 10 Feb 2009 12:24:54 GMT

No.
The password i am using is exactly 8 characters long.

It has only 1 special character "_"

Re: shadow and sudo (passwd authentication)

Doug O'Leary — Tue, 10 Feb 2009 12:56:35 GMT

Hey;

grep log /opt/sudo/etc/sudoers

If you don't have a log file entry in sudoers, put one in. Then, try the password authentication again and examine the sudo log.

I would have guessed that you have a @ in your password; however, your last entry says you don't.

Make sure you type your password cleanly - no backspaces, etc. Perhaps your term isn't set up quite correctly such that instead of

abc123

you're actually typing

adj^H^Hbc123

To answer your original question, though, shadow passwords and sudo are fully compatible. We use them across our environment to good effect.

Doug O'Leary

Re: shadow and sudo (passwd authentication)

Sunny Jaisinghani — Tue, 10 Feb 2009 13:06:39 GMT

The TERM is set to xterm

# echo $TERM
xterm

I am entering the password correctly.
Other users are also facing same problem with their passwords

There is no entry for log file in /etc/sudoers

However the sudo messages are logging in syslog.log

Feb 10 01:40:48 servername sudo: username : 2 incorrect password attempts ; TTY=pts/5 ; PWD=/home/username ; USER=root ; COMMAND=/usr/bin/su -
Feb 10 01:52:18 servername sudo: user : 1 incorrect password attempt ; TTY=pts/6 ; PWD=/home/user ; USER=root ; COMMAND=/usr/bin/su -

Re: shadow and sudo (passwd authentication)

S. Ney — Thu, 12 Mar 2009 13:57:15 GMT

Can you try connecting through a non Xterm application, like putty? Check to see if .Xauthority exists in your root and user home directories. I've found that there are issues with .Xauthority and su.(I am still trying to work out my own issues) When you are already logged in on an xterm window and then issue the su - command it references .profile and .Xauthority.

Re: shadow and sudo (passwd authentication)

Robert-Jan Goossens — Thu, 12 Mar 2009 14:10:34 GMT

Hi,

You could upgrade you sudo install to the latest version (1.6.9p17.001).

http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1123

Regards,
Robert-Jan