sudo problem

[Todd McDaniel_1]

I have an issue with sudo where a user gets this error.

"user NOT authorized on host"

Not exactly sure what that means, the user has access to the box and I have given them sudo permission to run the commands in /etc/sudoers.

[A. Clay Stephenson]

Look at the Host_Alias entries in your /etc/sudoers file.

[A. Clay Stephenson]

Look at the Host_Alias and User_Alias entries in your /etc/sudoers file.

[Jeff Schussele]

Hi Todd,

The command *must* be exactly what the user types. You can use wildcards, but the path & actual command must match that pattern.
Also most sudo rules apply to group perms so make sure the user is effectively in the proper group - i.e. if they're a member of several, they are presently in the proper one or you've set up netgroups to give them rights to all.

HTH,
Jeff

[Arunvijai_4]

Hi,

Perhaps, this could help http://www.ussg.iu.edu/UAU/advcomm/sudoers

-Arun

[Todd McDaniel_1]

So far as I know, We have never used any alias of any type.

I have the full path in the entry but with no options, that should give them the access to run it with any options they choose.

The user is only in one group.

[Jeff Schussele]

OK - I suspect it's in the sudoers file itself - section should look like:

User_Alias SUDO_NAME = %group_name1, %group_name2
Cmnd_Alias SUDO_CMD_NAMES = \
/path/to/first/command, \
/path/to/second/commnd, \
/path/to/final/command
SUDO_NAME ALL = (root) SUDO_CMD_NAMES

Note the need for commas after group definitions & commas/backslashes as well after all but the last command and the actual definitions at the end of the section.

It's easy to miss one of these.

HTH,
Jeff

[Todd McDaniel_1]

This is the format we have used for a long time and I have never had an issue with it.

user1 ALL=(ALL) NOPASSWD:/path/to/command

[Darrel Louis]

Todd,

Are you sure that there are no duplicate user-id's in your passwd or group file.
Does your syntax work for another user?

Can you do the following:
- id
- pwck
- grpck

Darrel

[Bill Hassell]

Check for duplicate IDs with:

logins -d