shadow and sudo (passwd authentication)

[Sunny Jaisinghani]

Hello All,

I have installed shadow software on my 11.11 box

# PHCO_27035 1.0 shadow.h cumulative patch
# ShadowPW B.11.11.03 HP-UX 11.11 Shadow Password Enablement Product
ShadowPW.SHADOW B.11.11.03 Shadow Password Enablement
ShadowPW.SHADOW-MAN B.11.11.03 Shadow Password Enablement Man Pages


The sudo version installed on this server is

Sudo version 1.6.3p7
Authentication methods: 'passwd' 'secureware'

When i do sudo su - my password does not accepted. It says wrong password. However; my passowrd works during login

So my doubt is

Do shadow and sudo(passwd authentication) work together?

Or i will have to change the authentication to PAM

Thanks
Sunny

[Steven E. Protter]

Shalom,

sudo is fully compatible with shadow password authentication.

I have used it on Linux and HP-UX shadowed systems.

I would have shadow installed and working prior to installing sudo, but that is probably not strictly necessary.

SEP

[Sunny Jaisinghani]

sudo with passwd authentication was working fine before we had installed shadow.

After installing shadow; sudo without passwd authentication works fine but not with passwd authentication

Can you suggest any action

[Dennis Handly]

Do you have any passwords that have more than 8 chars? Without trusted/shadow, any beyond 8 were ignored.

[Sunny Jaisinghani]

No.
The password i am using is exactly 8 characters long.

It has only 1 special character "_"

[Doug O'Leary]

Hey;

grep log /opt/sudo/etc/sudoers

If you don't have a log file entry in sudoers, put one in. Then, try the password authentication again and examine the sudo log.

I would have guessed that you have a @ in your password; however, your last entry says you don't.

Make sure you type your password cleanly - no backspaces, etc. Perhaps your term isn't set up quite correctly such that instead of

abc123

you're actually typing

adj^H^Hbc123

To answer your original question, though, shadow passwords and sudo are fully compatible. We use them across our environment to good effect.

Doug O'Leary

[Sunny Jaisinghani]

The TERM is set to xterm

# echo $TERM
xterm

I am entering the password correctly.
Other users are also facing same problem with their passwords

There is no entry for log file in /etc/sudoers

However the sudo messages are logging in syslog.log

Feb 10 01:40:48 servername sudo: username : 2 incorrect password attempts ; TTY=pts/5 ; PWD=/home/username ; USER=root ; COMMAND=/usr/bin/su -
Feb 10 01:52:18 servername sudo: user : 1 incorrect password attempt ; TTY=pts/6 ; PWD=/home/user ; USER=root ; COMMAND=/usr/bin/su -

[S. Ney]

Can you try connecting through a non Xterm application, like putty? Check to see if .Xauthority exists in your root and user home directories. I've found that there are issues with .Xauthority and su.(I am still trying to work out my own issues) When you are already logged in on an xterm window and then issue the su - command it references .profile and .Xauthority.

[Robert-Jan Goossens]

Hi,

You could upgrade you sudo install to the latest version (1.6.9p17.001).

http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1123

Regards,
Robert-Jan