Need a sudo for hpux 10.20 and 11.0

[S.Rider]

I've just installed sudo A.05.00-1.6.8p9 (from the HP DVD) on our 11.11 and 11.23 servers. We're likie to add sudo to the few 10.20 and 11.0 servers that we have left.
Can someone point me to an older version of sudo that will work on 10.20 and/or 11.00 ?

[Darrel Louis · Accepted solution]

Jay,

Check it at the following site:
http://www.courtesan.com/sudo/sudo.html

GoodLuck

Darrel

[Paul F. Carlson]

I have compiled sudo version 1.6.8p9 for both 10.20 and 11.00, and I have had no issues.

[Jeff_Traigle]

I can't vouch for this, but, on the sudo home page, there appear to be the p9 binaries for 10.20 and 11.00 as well as 11.11. The HP Porting Center only has depots for 11.11 and 11.23.

http://www.sudo.ws/sudo/dist/binaries/

[Greg Vaidman]

Source is available at http://hpux.cs.utah.edu/hppd/hpux/Sysadmin/sudo-1.6.8p9/

Of course, if you walk down the dependency tree, you also need make and gcc, and gcc then has about 10 other dependencies, none of which have binaries for 10.20. Ouch.

According to http://www.courtesan.com/sudo/runson.html (SUDO homepage), it looks like you can build the code from there with the bundled C compiler, so you may want to try that.

If you're not fond of building source, then I think this gives you the perfect excuse to tell management that they need to upgrade these boxes! You're probably paying more to keep them powered up and under support then it would cost to upgrade to a new system to replace them!

[Rick Garland]

The courtsean source I have compiled on 10.20 and 11.00 with no problems.

There will be some differences in the format of the sudolog file but functionally they work the same.

[Paul F. Carlson]

One thing to note if you decide to compile from source for 11.00 is there is an issue with passwords that are longer than 8 characters (I guess I lied when I said I didn't have any issues).

Passwords that are 8 characters or less are stored as a 13 bit hash. Passwords that are more than 8 characters are stored in a bigger hash (like 24 bits or something). Sudo uses the crypt() function to encrypt the password, then compares it to the stored password. Now the problem is that crypt() will only return a 13 bit hash no matter how big your password is. So if the password is greater than 8 characters, the password you enter into sudo and the password that is stored in the tcb database will never compare correctly. This will result in a "Sorry, try again" even though you are entering the correct password when you run sudo.

To fix this, you will have to modify auth/passwd.c in the source tree, and change the crypt() system call to bigcrypt(). Make this change, then compile and you're good to go. Note that I only had this issue with 11.00, 11.11 and 11.23 (not 10.20).

[Muthukumar_5]

Use this:

http://hpux.connect.org.uk/ftp/hpux/Sysadmin/sudo-1.6.8p9/sudo-1.6.8p9-src-11.11.tar.gz

I think it is applicale to 10.20 and 11.00 too.

-Muthu

[Arunvijai_4]

You have to download the source and compile it for 10.20 and 11.0. There are no depots available for 10.20 and 11.0

I believe, you can download the source from http://www.courtesan.com/sudo/dist/sudo-1.6.8p12.tar.gz and compile it on your own.

-Arun

[Cem Tugrul]

Jay,

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=983135