sudo not requiring password

sbammel · 07-23-2007, 09:22 PM

I have setup and configured sudo very basically. As you can see from the file below, I just want me(shane) to be able to sudo as root. Anywho, the problem is the fact that sudo never requires my password. This is not an issue of remember either, as it never did. Also, running sudo -K does not change the situation. I can freely sudo all day long w/o entering my password, ever.

Here's my sudoers file:

Quote:

#sudoers file.

## This file MUST be edited with the "visudo" command as root.

## See the man page for details on how to write a sudoers file.

# Host alias specification

# User alias specification

# Cmnd alias specification

# User privilege specification

#root ALL=(ALL) ALL
#onthego ALL=/usr/sbin/mesm
#%users ALL=/usr/bin/apt-get -s upgrade

shane ALL = PASSWD: ALL

As you can see i even included PASSWD: trying to force it as having nothing there didn't. I have never specified NOPASSWD either.

Any help?

Thanks,
Shane

win32sux · 07-23-2007, 10:35 PM

Does it work fine if you try with the following config? It's Ubuntu's default, with "%admin" changed to "shane".

Code:

Defaults        !lecture,tty_tickets,!fqdn

root    ALL=(ALL) ALL

shane ALL=(ALL) ALL

sbammel · 07-24-2007, 12:03 AM

Quote:

Originally Posted by win32sux

Does it work fine if you try with the following config? It's Ubuntu's default, with "%admin" changed to "shane".

Code:

Defaults        !lecture,tty_tickets,!fqdn

root    ALL=(ALL) ALL

shane ALL=(ALL) ALL

Erm... that works the same as it did. Sudo is functioning, but no password request.

This is in Mepis 6.5 if this helps.

Thanks,
Shane

win32sux · 07-24-2007, 12:34 AM

Does your sudo use PAM?

Code:

ldd /usr/bin/sudo | grep libpam

If so, what does your /etc/pam.d/sudo file look like?

sbammel · 07-24-2007, 12:48 AM

Quote:

Originally Posted by win32sux

Does your sudo use PAM?

Code:

ldd /usr/bin/sudo | grep libpam

If so, what does your /etc/pam.d/sudo file look like?

Looks like it does.

Quote:

shane@2[~]$ ldd /usr/bin/sudo | grep libpam
libpam.so.0 => /lib/libpam.so.0 (0xb7fa0000)

Quote:

Originally Posted by /etc/pam.d/sudo

#%PAM-1.0

@include common-auth
@include common-account

Shane