topic Re: Serious Sudo Help! in Operating System - Linux

Serious Sudo Help!

Qcheck — Fri, 28 Jan 2011 16:01:37 GMT

On linux 5.4, I would like to setup the sudo for the user, so that user can restart the ntpd. I did setup as follows:

# visudo
Host_Alias LINUXHELP = test_server
User_Alias USERS = tester
Cmnd_Alias SERVICES = /etc/init.d/ntpd restart

USERS LINUXHELP = SERVICES

-----------------------------------------------
Saved the above and tried to login to the node as the user. And ran the following, however errored out:

[Test_Server: /home/tester]# sudo -u tester'/etc/init.d/ntpd restart'
tester is not allowed to run sudo on test_server. This incident will be reported.

-----------------------------------------------
The /var/log/secure file reports the following:

Jan 28 10:55:17 test_server sudo: tester: user NOT authorized on host ; TTY=pts/2 ; PWD=/home/tester ; USER=tester; COMMAND=/etc/init.d/ntpd restart

+++++++++++++++++++++++++++++++++++++++++

Please help me to fix. I did this before, and not sure hy it is not working. What am I doing wrong?

Thank you in an advance!

Re: Serious Sudo Help!

Matti_Kurkela — Fri, 28 Jan 2011 16:57:44 GMT

# sudo -u tester'/etc/init.d/ntpd restart'

Based on a quick bit of testing on RHEL 5.5,
sudo seems to regard the quoted and unquoted versions as two different commands. Try without the quotes:

# sudo -u tester /etc/init.d/ntpd restart

If that does not work either, please run "sudo -l" as user "tester". If it does not list "/etc/init.d/ntpd restart" as an allowed command, it might be a hostname lookup mismatch. The hostname (or Host_alias) must exactly match the output of the "hostname" command.

MK

Re: Serious Sudo Help!

Qcheck — Mon, 31 Jan 2011 20:23:46 GMT

MK, Thank you for the response. However, still doesn't work. Please find the following:

[test_server: /home/tester]# sudo -l
[sudo] password for tester:

User tester may run the following commands on this host:
(root) /etc/init.d/ntpd restart
[test_server: /home/tester]# sudo -u tester /etc/init.d/ntpd restart
Sorry, user tester is not allowed to execute '/etc/init.d/ntpd restart' as tester on test_server.
[test_server: /home/teser]# hostname
tester
[test_server: /home/tester]#

Please guide.

Thank you.

Re: Serious Sudo Help!

Zinky — Mon, 31 Jan 2011 21:21:07 GMT

User tester may run the following commands on this host:
(root) /etc/init.d/ntpd restart

Your SUDO rights means user tester is allowed to run that command with "root" priviliges.

So:

tester% sudo /etc/init.d/ntpd restart

should do it. It will however prompt for tester's password.

Re: Serious Sudo Help!

Qcheck — Tue, 01 Feb 2011 17:08:43 GMT

Alzhy, Thank you for the help. I know, I didn't realize I was using the command sudo -u, being the user as tester. Without the option "u" it worked.

Thank you, again.