1834236 Members
2583 Online
110066 Solutions
New Discussion

Sudo Passwords Problems

 
SOLVED
Go to solution
Glynn Aherne_1
Advisor

Sudo Passwords Problems

Hi,

I've just installed Sudo-1.6.6 on my L-class HP-UX 11.0.

I have a line in my sudoers file

%it ALL: ALL

which I think allows the users in group "it" to run any command on any server as root, but the have to enter there password.

The problem I am having is that the user is only prompted for their password the first time they sudo.

Is there anyway they are prompted for their password everytime they sudo.

I have tried

%it ALL=PASSWD:ALL

but to no avail

Thanks,

Glynn.

4 REPLIES 4
Craig Rants
Honored Contributor

Re: Sudo Passwords Problems

Try,

User_Alias USERS = bob, john, all users...

USERS = PASSWD: ALL


GL,
C
"In theory, there is no difference between theory and practice. But, in practice, there is. " Jan L.A. van de Snepscheut
D. Jackson_1
Honored Contributor

Re: Sudo Passwords Problems

Give this a try:# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the man page for the details on how to write a sudoers file.
#

# Host alias specification

# User alias specification
User_Alias WHATEVER=%it

# Cmnd alias specification
Cmnd_Alias SOMETHING=/etc/Tivoli/, /appl/Tivoli/

Defaults:WHATEVER !authenticate

# User privilege specification
root ALL=(ALL) ALL
%it ALL=(ALL) NOPASSWD:SOMETHING

HTH
DCJ

Michael Tully
Honored Contributor

Re: Sudo Passwords Problems

Hi,

Here is what we use on our support server, with no specical considerations. It basically allow these people to run 'su -'

HTH
~Michael~

# User alias specification
User_Alias SYSADM = myuser1, myuser2
User_Alias OMNI = myuser1, myuser2

# Cmnd alias specification
Cmnd_Alias SU = /usr/bin/su
Cmnd_Alias OMNI = /opt/omni/bin/xomni

# User privilege specification
root ALL=(ALL) ALL
SYSADM ALL=(ALL) ALL
Anyone for a Mutiny ?
Rainer von Bongartz
Honored Contributor
Solution

Re: Sudo Passwords Problems


put the following in your sudoers file to make sudo prompt for passwords every time

Defaults timestamp_timeout=0


Regards
Rainer
He's a real UNIX Man, sitting in his UNIX LAN making all his UNIX plans for nobody ...