sudo authentication

[Jeff_Traigle]

I'm beginning to test sudo (v1.6.7p5 on HP-UX 11.00), but have a problem with it that doesn't seem right to me. I have the following defined for an individual user to add and delete users on the system:

user hostname = /usr/sbin/useradd, /usr/sbin/userdel

That much works fine, but the user's password is only requested the first time an sudo command is issued. All subsequent invocations complete without authentication, which seems like an unwise thing to allow. Is this the way it is really supposed to work or am I right in thinking that if authentication is required it should be required for every invocation by the user?

[Jeff_Traigle]

Geez. Nevermind... going to be one of those days... just saw the bit in the first paragraph of the sudo man page that says this is normal for 5 minutes).