Sudo and NIS

[IRI Unix Support Team]

Hi, I have a particular problem with how sudo works with NIS passwords. On an HPUX 11.i system with the latest ver of sudo, I cannot get it to pick up the NIS password for an NIS users. However, sudo will work if the NIS user is actually locally added with password to /etc/passwd. Any ideas on how I can address this since it would force me to install users locally just to get sudo to "find" their password and thus let them pass.Thanks!

[Patrick Wallek]

sudo and NIS should work together without any problems.

Are your users able to get into the system otherwise?

Do you have an entry like:

+::0:0::::

as the last entry in the /etc/passwd file?

Are you getting any other errors when you try to use sudo?

[S.K. Chan]

Not an expert in sudo here but I think it has something to do with how you configure your /etc/sudoers file. Do a ..
# man sudoers
for details. It may/may-not be it.

[IRI Unix Support Team]

Yes, I have an entry for the particular user id, seddm, as +seddm:-2:-2:::, but I tried to put in the token at the end also, +:0:0:::. Still doesn't work. It prompts 3 times for id and then kicks me out. I also tried to setup a special group in /etc/group and then added the following entry to sudoers: %sudoadm, and that doesn't work either. I also added the following to the nsswitch.conf file: passwd files [NOTFOUND=continue] nis, but that didn't work either. It really makes no sense. I'm thinking that there might be some config.h definition that needs to be turned on when I originally compiled sudo, but there's nothing obvious in the config.h file. Thanks!

[Giri Sekar]

Hi:

I would do this additionally.

# odump -sllibload sudo
and look into the shared library load list and make sure the sudo program is linked with those libraries.

Thanks
Giri.