Creating a sudo user in RHAS 2.1

[Jorge Cocomess]

Greetings,

I would like to know how to setup a user with sudo account. I would like to give this user the option to change the permission on a file from time to time.

I will try to do everything before giving up the root password.

Again, we're currently using RHAS 2.1.

Thank you in advance.

Jorge

[Court Campbell]

install sudo if it is not already installed. then run visudo as root. and add something like this

username ALL = /bin/chmod /path/to/file NOPASSWD: ALL

This will allow the user to run chmod on the file as root. The NOPASSWD will not prompt the user for the users password. If you omit that the user will be prompted for the users password.

[Ivan Ferreira · Accepted solution]

Disagree, if you add that line:

username ALL = /bin/chmod /path/to/file NOPASSWD: ALL

You will be giving the possibility to user "username" to run ALL commands as root. The format of the file is:

USER HOSTS = [(RUN_AS_USER)] [NOPASSWD:] LIST_OF_COMMANDS

For example, using visudo add:

user01 ALL = NOPASSWD: /bin/chmod /path/to/file

[Court Campbell]

Ivan,

You are correct. i still get confused with the order in the sudoers file.

[Jorge Cocomess]

I just need to know where I should add this user-name in the sudo script.

Thank you everyone.

Jorge

[Court Campbell]

just add it to the end of the file.

[Jorge Cocomess]

Okay, I added this line to the end of the sudoers script.
user01 ALL = NOPASSWD: /bin/chmod /path/to/file

Is there anything else I will need to do before I test out by logging as this user??

Thanks so much for your help.

Jorge

[Court Campbell]

Hopefully you did not actually add this exact statement.

user01 ALL = NOPASSWD: /bin/chmod /path/to/file

You need to pull the path to a real file.

Ej.

user01 ALL = NOPASSWD: /bin/chmod /data/eng/eng_group_file.out

Otherwise you are good to go.

[Court Campbell]

Hopefully you did not actually add this exact statement.

user01 ALL = NOPASSWD: /bin/chmod /path/to/file

You need to put the path to a real file.

Ej.

user01 ALL = NOPASSWD: /bin/chmod /data/eng/eng_group_file.out

Otherwise you are good to go.

[Jorge Cocomess]

No, that exactly like that. I still have have a permission issue when I tried to do a chmod.

Any ideas?

Jorge

[Court Campbell]

What is the issue? can you post the output?

[Jorge Cocomess]

I was getting a message stating, "chmod: changing permission of 'test.txt' : operation not permitted"

Jorge

[Court Campbell]

as the user did you do the following

# sudo chmod 755 /data/test.txt

the user will need to type the word sudo before the command and arguments.

[Jorge Cocomess]

Oh no, I did not submit the sudo command before using. let me try it again and let you know.

Thanks so much.

Jorge

[Court Campbell]

Is this resolved?

[Jorge Cocomess]

Sorry, but I was totally tied up with other operational issues yesterday.

Anyways, this is an error message that I received, "We trust you have received the usual lecture from the local system administrator. It usually boils down to these two things:
1. Respect the privacy of others.
2. Think before you type.

Password:

[Jorge Cocomess]

Sorry, but I was totally tied up with other operational issues yesterday.

Anyways, this is an error message that I received, "We trust you have received the usual lecture from the local system administrator. It usually boils down to these two things:
1. Respect the privacy of others.
2. Think before you type.

Password: "


I assume it's asking for the root password.

Please advise.

Jorge

[Court Campbell]

seems like something is wrong with the entry in the sudoers file. Can you please post the line that you added.

[skt_skt]

uid ALL=(root) NOPASSWD: scriptname

try this way.it should work

[Jorge Cocomess]

Should I use the actual user_name (test1) or should I be using the UID?? Does the NOPASSWD should be in caps or lowercase characters?

Thanks,
Jorge

[Court Campbell]

Jorge,

I finally tested this on my laptop. Your entry should look like so

user1 ALL = NOPASSWD: /bin/chmod * /tmp/testfile

You need the asterisk as a placeholder for the mode, ie, 0750.

[skt_skt]

uid ALL=(root) NOPASSWD: scriptname

test1 ALL=(root) NOPASSWD: /xx/yy/zz.ksh

[Jorge Cocomess]

I will give that a try and let you all know by tomorrow.

Thank you very much!!

Jorge

[Jorge Cocomess]

I guess the easiest thing for me to do was set it this way " User1 ALL = NOPASSWD: ALL "

This will eliminate the password prompt.

Thanks everyone.

Jorge

[Jorge Cocomess]

Found what I was looking for.

Thanks,
Jorge