sudo problem

humbletech99 · 02-09-2006, 09:43 AM

Hi,
I'm running Suse 10 and have domain authentication working correctly via samba+winbind+kerberos. I can log on via ssh as administrator of the domain or locally via console. I've added the following line to sudoers:

Code:

administrator   ALL=(ALL) ALL

but I still can't "sudo su". I get the message:

Code:

sudo: pam_authenticate: User not known to the underlying authentication module

I've checked the pam for sudo and it references the four common-* files which ssh and login also use so this should just work.

This all works on another gentoo machine.

What have I missed?

satinet · 02-09-2006, 10:25 AM

can you run other sudo function e.g. sudo cat /etc/passwd

or is just switching user (su) and the associated authentication.....

humbletech99 · 02-09-2006, 10:28 AM

no, it's a sudo problem, I can't do "sudo bash" either and the error is always the same from the sudo pam_authentication not finding the domain user, even though it appears in getent passwd and wbinfo -u and I am logged in as that user via SSH...

satinet · 02-09-2006, 10:45 AM

does it work when you are logged in locally?

humbletech99 · 02-09-2006, 10:50 AM

ok sorted it, there were a couple of sneaky lines that this stupid suse machine had in there by default, removed them and all is working now, thanks. The lines were:

Code:

Defaults targetpw    # ask for the password of the target user i.e. root
%users ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'

satinet · 02-09-2006, 10:51 AM

lol, i would have told you that if you had posted the entire file.

then again i hate those posts that give, say, an entire xorg.conf and then say 'so what's going wrong here guys'

humbletech99 · 02-09-2006, 11:01 AM

yeah me too, who can be bothered to read whole xorg.conf when you can usually point to problem by symptom. Although here, because I'm confident in this, I didn't think my stuff was wrong, which is wasn't, but I didn't see the lines at the top of the file, I later just spotted them by accident after much frustration. Usually there is nothing enabled so you don't have to strip things out, don't know what was going on there, fresh suse machine...

will know to be more thorough next time!

thanks for helping...