Sudo: NOPASSWD when doing useradd ask me for password

joaquin386 · 01-21-2011, 09:59 AM

When I put these in the /etc/sudoers

opv ALL = NOPASSWD: /usr/sbin/useradd, /usr/sbin/userdel, /usr/sbin/groupadd, /usr/sbin/groupdel, /usr/sbin/groupmod, /usr/sbin/usermod, /usr/bin/chsh, /usr/bin/passwd
, /usr/bin/last, /bin/awk, /bin/cat, /bin/chmod, /bin/cp, /bin/chown, /bin/cut, /bin/diff, /bin/echo, /bin/grep, /bin/ln, /bin/ls, /bin/mv, /bin/ps, /bin/rm, /bin/sed,
/bin/sort, /usr/bin/tail, /bin/touch, /bin/chgrp, /bin/mkdir

opv user has to input the root password (when doing the useradd command) even though I put NOPASSWD how is this possible? I don't want any password prompt.

BR

Jo

Snark1994 · 01-21-2011, 10:50 AM

Try removing the commas in the sudoers file.

joaquin386 · 01-21-2011, 11:24 AM

SOLVED:
Had to comment these lines out:

# Defaults targetpw # ask for the password of the target user i.e. root

# ALL ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'!

I had those lines enable.

Dark_Helmet · 01-21-2011, 11:25 AM

You need to post the contents of you sudoers file--not just the line you want. When/if you post it, put the contents inside [code] <contents> [/code] tags in your reply.

The reason you need to post it is because subsequent directives in sudoers can override previous ones.

As an example, look at mine:

Code:

# /etc/sudoers
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the man page for details on how to write a sudoers file.
#

Defaults	env_reset

# Host alias specification

# User alias specification

# Cmnd alias specification

# User privilege specification
root	ALL=(ALL) ALL

# Uncomment to allow members of group sudo to not need a password
# (Note that later entries override this, so you might need to move
# it further down)
# %sudo ALL=NOPASSWD: ALL

# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL

darkhelmet	ALL=NOPASSWD: /sbin/shutdown, /usr/bin/apt-get update, /usr/bin/apt-get upgrade

I do not need to enter a password for any of the three commands listed. HOWEVER, if I swapped the last two lines like so:

Code:

darkhelmet	ALL=NOPASSWD: /sbin/shutdown, /usr/bin/apt-get update, /usr/bin/apt-get upgrade

%admin ALL=(ALL) ALL

I WOULD have to enter a password. The reason is because darkhelmet is part of the admin group. The last assignment overrides the previous assignment to the specific account.

At least, that's been my experience working with sudo. Like I said, you'll need to post your sudoers file for us to be certain.

EDIT: Looks like we posted at about the same time. Glad you got it working.

joaquin386 · 01-21-2011, 11:28 AM

True I should post the whole file. Next time (it would even be time saving for everyone)