SuSE93 Root password rejected from normal user mode (No Sudo, No YaST)

Peacepunk · 02-10-2007, 01:21 AM

Hi Community

I've seen this on the formum, but none help:

None of the users can "sudo" or access admin privileges on my SuSE93 box, when prompt for password it's stated as "incorrect"

-I can still log as root
-I changed the root password

-All users (3) face the same issue.
-Main User is set to group Wheel (thsi doesn't look to dangerous to edit)

At some point on these forums, I found advice on the need to do "visudo" (edit my sudoers' profile specs). It looks frightening, I don't wan't to play with that fiel without a bit more assistance.

-Name of my main user: "jph"
-Name of restricted users (no admin, no root shell, but dvdrom mount, scanning & printing ok): "moufflets";"poutou"

-Actual content of my sudoers:

Quote:

# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#

# Host alias specification

# User alias specification

# Cmnd alias specification

# Defaults specification
Defaults targetpw # ask for the password of the target user i.e. root
%users ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'!

# Runas alias specification

# User privilege specification
root ALL=(ALL) ALL

# Uncomment to allow people in group wheel to run all commands
%wheel ALL=(ALL) ALL

# Same thing without a password
# %wheel ALL=(ALL) NOPASSWD: ALL

# Samples
# %users ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users localhost=/sbin/shutdown -h now
~
~
~
~
~
~
1,1 Al

Word of advice ?

Thanks

Jean-Philippe.

jschiwal · 02-10-2007, 05:57 PM

%wheel ALL=(ALL) ALL

If you uncomment this line, then members of group wheel can use sudo.
You need to include the full pathname when using sudo. This is a precaution in case someone has inserted an identically named program in your PATH.

For example: "sudo /sbin/route" instead of "sudo route".

Members of the wheel group don't magically get extra access. It is a convenient standardized name for the group that is allowed administrative access when configured. In other words, it's the group name in /etc/sudoers that is assumed you want to use.

Peacepunk · 02-11-2007, 06:34 PM

Hmm...

I lost the ability to sudo with my latest mods

Code:

sudo /sbin/YaST2 returns

sudo: must be setuid root

According to MAN pages, I tried to add my normal user to do it all (Don't like that, but...)

Fail again, can't su, can't sudo, can't do admin things either

Mod lines in sudoers:

Code:

# User alias specification
User_Alias     FULLTIMERS = jph


# Cmnd alias specification

# Defaults specification
Defaults targetpw    # ask for the password of the target user i.e. root
%users ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'!

# Runas alias specification

# User privilege specification
root	ALL=(ALL) ALL

# Uncomment to allow people in group wheel to run all commands
%wheel	ALL=(ALL)	ALL
FULLTIMERS     ALL=NOPASSWD: ALL

# Same thing without a password
# %wheel	ALL=(ALL)	NOPASSWD: ALL

???

Jean-Philippe