sudo problem

[DeafFrog]

here's what /usr/local/etc/sudoers file for machine looks like :
Cmnd_Alias ADMINS=/usr/sbin/useradd
root ALL=NOPASSWD:ALL
%sysadmin ALL=NOPASSWD:ALL
%oper ALL=NOPASSWD:ALL
~
user1 root=NOPASSWD:ADMINS

But here's what i am getting ....
$ whoami
user1
$ /usr/sbin/useradd -g general -m user2
Permission Denied
....i have tried googling ...but not working.

[Patrick Wallek]

You have to actually use the 'sudo' command in order to get permissions.

$ sudo /usr/sbin/useradd -g general -m user2

[Avinash20]

You need to use sudo before /usr/bin/useradd

[Avinash20]

/opt/sudo/bin/sudo /usr/sbin/useradd [options]

[Avinash20]

Also refer to the following thread

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=997812

Please assign points to this threads !!

[DeafFrog]

Thanks Patrick ,

$ /usr/local/bin/sudo /usr/sbin/useradd -g general -m user2

We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these three things:

#1) Respect the privacy of others.
#2) Think before you type.
#3) With great power comes great responsibility.

Password:
Sorry, try again.
Password:
Sorry, try again.
Password:
..................and the passwd is correct.

[Avinash20]

Try less than 8 char password

[Patrick Wallek]

What password are you using?

The password you use is the password of the ID you are logged in as. In this case the password of user1.

[DeafFrog]

Thanks Avinash and Patrick ,

I ahve tried both the passwd , for uer1 and root .not the mesasage is
Last successful login for user1: Tue Mar 3 18:17:31 oman-4 2009
Last unsuccessful login for user1: Tue Mar 3 18:46:50 oman-4 2009 on pts/0
user1 is not allowed to run sudo on mwdev1. This incident will be reported.
.....the system is trusted.

[Avinash20]

You have not defined the parameter in visudo correctly.

[Avinash20]

user1 root = NOPASSWD :/usr/bin/useradd

Try and let me know

[Avinash20]

Also ensure to check what privileges you are having via
sudo -l

[Tingli]

I am not sure....

It seems that you don't need to use password for the whole thing.

Maybe you can try:

sudo -u root -c "/usr/sbin/useradd -g general -m user2"

[DeafFrog]

Dear Avinash ,

I have always assigned points , you can look into profile.I think i have to get the user1 account enabled in sudo now .....there's the message......Last unsuccessful login for user1: Tue Mar 3 18:46:50 xyz-4 2009 on pts/0
user1 is not allowed to run sudo on xyz. This incident will be reported.

[DeafFrog]

Tingli : your suggested command showed problem in syntax
Avinash : after , user1 root = NOPASSWD :/usr/bin/useradd : problem persists

[Tingli]

Take away the "-u root".

Also, did you create the sudoers file by visudo, which will check the syntax of the file?

[Avinash20]

Refer
http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=997812

[DeafFrog]

Yes Tingli , i have created that via visudo ,
i have alredy posted above the content of that file above .
here's o/p of sudo -v
/usr/local/bin/sudo -v
Sorry, user user1 may not run sudo on xyz.

[DeafFrog]

Avinash ,the thread you posted suggested restricted sam as option.But there has to be a solution to this , i have tried setting up RBACK also ...may be towmarrow will be a good day

[Avinash20]

"the thread you posted suggested restricted sam as option"

I wanted you to check only the first two notes in the thread

[Heironimus · Accepted solution]

I think your sudoers entry is incorrect. You probably want something like this:

user1 ALL=(root) NOPASSWD: ADMINS



Another option would be to set up restricted SAM access for user1, but I don't really know much about that.

[DeafFrog]

Thank you Heironimus ! your solution worked out.
Efforts by Avinash and Tingli were also of great help ,Thanks a lot man.
Solution : user1 ALL=(root) NOPASSWD: ADMINS , was the correct entry that needs to be put in to the /usr/local/sbin/visudo file.