Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here. |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
 |
|
06-20-2006, 06:04 PM
|
#1
|
Member
Registered: Jun 2006
Location: /dev/null
Distribution: Slackware 13.1, Slackware 13.37, aptosid, rhel
Posts: 547
Rep:
|
Sudo Help...
I have enable sudo in a linux server where we have about 300+ user accounts...
in visudo I have specify who can use sudo "IT Department" and I didnt ad the users... But when the users who where able to change there pass before I enable sudo they are no longer able to change there pass?!? I want each user to be able to change there own pass without having to use sudo...
Is this normal? adding passwd to the Cmnd_Alias will restrict others from using it if there not in sudo.conf?
I have RH Enterprise 3
Thank You!
|
|
|
06-20-2006, 11:59 PM
|
#2
|
Senior Member
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora
Posts: 3,935
Rep: 
|
Just curious: Why in the world would you make regular users sudoers for the passwd program? Everyone should already be able to change their own password.
|
|
|
06-21-2006, 01:11 AM
|
#3
|
Member
Registered: Jun 2006
Location: /dev/null
Distribution: Slackware 13.1, Slackware 13.37, aptosid, rhel
Posts: 547
Original Poster
Rep:
|
I didnt.
I enable passwd in the sudoers file so the IT department can change password for those users who for get there password.
I know users can change there password but when I put passwd in the sudoers file it wont let the users change there passwords...
If you want I can post my sudoers file here so you can see my config maybe you can spot the prob...
Last edited by SeRi@lDiE; 06-21-2006 at 01:13 AM.
|
|
|
06-21-2006, 09:51 AM
|
#4
|
Member
Registered: Jun 2006
Location: /dev/null
Distribution: Slackware 13.1, Slackware 13.37, aptosid, rhel
Posts: 547
Original Poster
Rep:
|
Bump^^
Any body?
This is becoming a big problem... 
|
|
|
06-21-2006, 09:56 AM
|
#5
|
Member
Registered: Jun 2006
Location: /dev/null
Distribution: Slackware 13.1, Slackware 13.37, aptosid, rhel
Posts: 547
Original Poster
Rep:
|
I just found out that is not just adding passwd to the suoders file...
I remove passwd from the sudoers file and I still have the same problem... If I disable sudo passwd will work for every user.
Any ideas?
|
|
|
06-21-2006, 10:11 AM
|
#6
|
Member
Registered: Jul 2005
Location: England, UK
Distribution: Ubuntu 8.04 Server, Kubuntu 12.04
Posts: 698
Rep:
|
You should just need to add
Code:
%IT all = /usr/bin/passwd [A-z]*, !/usr/bin/passwd root
This should let members of the IT group change all passwords except root.
|
|
|
06-21-2006, 03:04 PM
|
#7
|
Member
Registered: Jun 2006
Location: /dev/null
Distribution: Slackware 13.1, Slackware 13.37, aptosid, rhel
Posts: 547
Original Poster
Rep:
|
binary thanks for the reply but the problem I have is if I enable sudo regular users can not change there own password.
I wan the regular users to change there own password when it expires... If I enable sudo it wont let the users
change there own password....
|
|
|
06-21-2006, 03:20 PM
|
#8
|
Member
Registered: Jul 2005
Location: England, UK
Distribution: Ubuntu 8.04 Server, Kubuntu 12.04
Posts: 698
Rep:
|
That's strange, my system uses suso and any user can still change there pass
|
|
|
06-22-2006, 12:11 AM
|
#9
|
Member
Registered: Jun 2006
Location: /dev/null
Distribution: Slackware 13.1, Slackware 13.37, aptosid, rhel
Posts: 547
Original Poster
Rep:
|
Very strange indeed!
This a big problem for me.... 
Maybe that my sudo is out off date...
Going to upgrade the server....
|
|
|
06-23-2006, 03:51 PM
|
#10
|
Member
Registered: Jun 2006
Location: /dev/null
Distribution: Slackware 13.1, Slackware 13.37, aptosid, rhel
Posts: 547
Original Poster
Rep:
|
Any Body? ^^

|
|
|
06-23-2006, 04:33 PM
|
#11
|
Member
Registered: Jan 2006
Posts: 37
Rep:
|
The regular users should only be doing a standard passwd command. The IT department will use the 'sudo passwd username' command.
Is that how you've got it setup?
|
|
|
06-23-2006, 11:38 PM
|
#12
|
Member
Registered: Jun 2006
Location: /dev/null
Distribution: Slackware 13.1, Slackware 13.37, aptosid, rhel
Posts: 547
Original Poster
Rep:
|
Yes thats how I have it setup...
But once enable sudo the IT department is able to change password for other but users are unable to change there own password.
|
|
|
06-24-2006, 02:08 AM
|
#13
|
Member
Registered: Jan 2006
Posts: 37
Rep:
|
Are they trying to change their own individual password with sudo? ie. is bobj trying to change the password for bobj with sudo? That's a no-no. They should change their own password with the regular password command.
|
|
|
06-24-2006, 02:33 AM
|
#14
|
Member
Registered: Jun 2006
Location: /dev/null
Distribution: Slackware 13.1, Slackware 13.37, aptosid, rhel
Posts: 547
Original Poster
Rep:
|
Quote:
Originally Posted by katayamma
Are they trying to change their own individual password with sudo? ie. is bobj trying to change the password for bobj with sudo? That's a no-no. They should change their own password with the regular password command.
|
Yes I know the users have no idea about sudo they dont even know what sudo is...
sudo is only for the IT department.... users are trying to change there password by running passwd and it dont work for them.
|
|
|
06-24-2006, 01:54 PM
|
#15
|
Senior Member
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora
Posts: 3,935
Rep: 
|
I understand what you're describing now, but I've never seen this problem in RHEL3. Are you sure the only change you made was to the sudoers file? You weren't messing around with PAM or anything? How about selinux?
If you're sure, then this would be a good time to make use of that support contract. Sounds like a bug, perhaps. (Assuming you haven't been playing around with other things.)
|
|
|
All times are GMT -5. The time now is 10:10 PM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|