Hi,

I wants to provide sudo access for the user to reset only "passwords" for all the users in that server. i User Redhat5 server...

in /etc/sudoers
for example, yourself from any networked Machine

more information can be found in the sudoers man page

You've been asking about sudo for over a year now:
http://www.linuxquestions.org/questi...do-4175414585/

Have you made no progress in your learning since your first question? And you do realize what you're asking for is pointless, right?? Because if you give a user you don't trust with OTHER root commands the ability to change root's password, you have essentially given them FULL ACCESS TO THE SYSETM, whenever they want it. They can just run "sudo passwd root", put in a new password, then log in AS ROOT. From there, they can remove ALL traces of what they did, and do whatever they want...including editing the sudoers file, creating new root-level users, etc.

good point

restricts to three 'named' usernames

Yep...or you could do:
...which will let them change anyone ELSES passwd but root. Still, though...horribly insecure, and if you don't trust the user to do other root functions, giving them ANY root privileges at all is risky.

1. I don't see any reason to use the NOPASSWD option.
2. The whole point of using sudo is to give a user only some privileges that usually belong to root. May you please explain why this is horribly insecure?

Well, that was the option I had in the example I posted. No real REASON to, and it's totally optional.
To me (and I'm fully prepared to admit I may be paranoid about such things), is that the above setup will let the user change ANYONE'S password, except root. If another user is in the sudoers file with more access, the user can now log in as THEM, get a root shell/run other commands, and have a field day. There may be others users set up as group 0 (I know...but it COULD happen), and the same applies.

I *NEVER* give sudo rights to ANYONE for ANYTHING, unless I know I can trust them on the system. It does create more work at times, but keeps me from having to undo damage and answer questions to auditors...I feel it's worth the tradeoff.

thats correct ...why and what matters a much here than too just simply opting for a NOPASSWD option to change anyone else's password.