Sudo not working & brings up a unwanted banner.

Hi All

I have configured Sudo for a PAM user on my system.
It works FINE on another system, but when i say sudo passwd root It comes up with this banner.

[pamuser@oraclelinux ~]$ sudo passwd root We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things: #1) Respect the privacy of others. #2) Think before you type. #3) With great power comes great responsibility. [sudo] password for pamuser:

These are my sudo settings for user pamuser in /etc/sudoers file, im running oracle linux 7.3.

## Allow root to run any commands anywhere
root ALL=(ALL) ALL
pamuser ALL=(ALL) NOPASSWD: ALL

## Allows people in group wheel to run all commands
%wheel ALL=(ALL) ALL
%pam ALL=(ALL) NOPASSWD: ALL

Cmnd_Alias PAM = /usr/bin/grep, /usr/bin/cp, /usr/bin/tee, /usr/bin/sed, /usr/bin/passwd, /usr/bin/rm

%pam ALL = PAM

I have added a group called pam and modified it with this command
usermod -G pam -g wheel pamuser

Please advise on how to get rid of this banner and enable the sudo to work ?

Thanks

I don't use sudo much, but have seen this in response to the su command.

AFAIK, it's just a warning basically asking if you know what you're doing. Also, again AFAIK, it only happens one time (for each user?). Have you entered the requested password (which would make sudo "work")?
What happens the second time you try?

[Although, if what I think I know isn't correct...what difference does it make that there's what essentially amounts to a multi-line prompt before you enter a password? On my production server I have a login banner:

************************************************************
*                       ******                             *
*            The Name of My Company , LLC                  *
*                AUTHORIZED ACCESS ONLY                    *
* Login to this server is limited to authorized users only *
*      Proceed ONLY if you are an authorized user.         *
*  Attempts to circumvent user authentication or security  *
*  of any host, network, web server or account will be     *
*  logged and prosecuted to the fullest extent possible.   *
*                       ******                             *
************************************************************
user@server's password:

That certainly doesn't impede logging in in any way. ]

comments in your post in here in red.

Originally Posted by LinuxRSA Hi All I have configured Sudo for a PAM user on my system. It works FINE on another system, but when i say sudo passwd root It comes up with this banner. These are my sudo settings for user pamuser in /etc/sudoers file, im running oracle linux 7.3. ## Allow root to run any commands anywhere root ALL=(ALL) ALL #that is saying it is a user NAMED pamuser pamuser ALL=(ALL) NOPASSWD: ALL ## Allows people in group wheel to run all commands %wheel ALL=(ALL) ALL %pam ALL=(ALL) NOPASSWD: ALL Cmnd_Alias PAM = /usr/bin/grep, /usr/bin/cp, /usr/bin/tee, /usr/bin/sed, /usr/bin/passwd, /usr/bin/rm %pam ALL = PAM I have added a group called pam and modified it with this command usermod -G pam -g wheel pamuser Please advise on how to get rid of this banner and enable the sudo to work ? Thanks

I created user and a group added group to sudoers file, tested by loging in as new user and issing sudo commands.

notice user name 'dummy' under my user name logged in,

[dummy@manjaroieo userx]$ cat /etc/sudoers
cat: /etc/sudoers: Permission denied

was denied due to not using root privs.

now using sudo (root privs) it works.

[dummy@manjaroieo userx]$ sudo cat /etc/sudoers
## sudoers file.
##
## This file MUST be edited with the 'visudo' command as root.
## Failure to use 'visudo' may result in syntax or file permission errors
## that prevent sudo from running.
##
## See the sudoers man page for the details on how to write a sudoers file.
##

##
## Host alias specification
##
## Groups of machines. These may include host names (optionally with wildcards),
## IP addresses, network numbers or netgroups.
# Host_Alias    WEBSERVERS = www1, www2, www3

##
## User alias specification
##
## Groups of users.  These may consist of user names, uids, Unix groups,
## or netgroups.
# User_Alias    ADMINS = millert, dowdy, mikef

##
## Cmnd alias specification
##
## Groups of commands.  Often used to group related commands together.
# Cmnd_Alias    PROCESSES = /usr/bin/nice, /bin/kill, /usr/bin/renice, \
#                           /usr/bin/pkill, /usr/bin/top
# Cmnd_Alias    REBOOT = /sbin/halt, /sbin/reboot, /sbin/poweroff

##
## Defaults specification
##
## You may wish to keep some of the following environment variables
## when running commands via sudo.
##
## Locale settings
# Defaults env_keep += "LANG LANGUAGE LINGUAS LC_* _XKB_CHARSET"
##
## Run X applications through sudo; HOME is used to find the
## .Xauthority file.  Note that other programs use HOME to find   
## configuration files and this may lead to privilege escalation!
# Defaults env_keep += "HOME"
##
## X11 resource path settings
# Defaults env_keep += "XAPPLRESDIR XFILESEARCHPATH XUSERFILESEARCHPATH"
##
## Desktop path settings
# Defaults env_keep += "QTDIR KDEDIR"
##
## Allow sudo-run commands to inherit the callers' ConsoleKit session
# Defaults env_keep += "XDG_SESSION_COOKIE"
##
## Uncomment to enable special input methods.  Care should be taken as
## this may allow users to subvert the command being run via sudo.
# Defaults env_keep += "XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER"
##
## Uncomment to use a hard-coded PATH instead of the user's to find commands
# Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
##
## Uncomment to send mail if the user does not enter the correct password.
# Defaults mail_badpass
##
## Uncomment to enable logging of a command's output, except for
## sudoreplay and reboot.  Use sudoreplay to play back logged sessions.
# Defaults log_output
# Defaults!/usr/bin/sudoreplay !log_output
# Defaults!/usr/local/bin/sudoreplay !log_output
# Defaults!REBOOT !log_output

##
## Runas alias specification
##

##
## User privilege specification
##
root ALL=(ALL) ALL

## Uncomment to allow members of group wheel to execute any command
 %wheel ALL=(ALL) ALL

## Same thing without a password
%wheel ALL=(ALL) NOPASSWD: ALL
%mysudo ALL=(ALL) NOPASSWD: ALL



## Uncomment to allow members of group sudo to execute any command
# %sudo ALL=(ALL) ALL

## Uncomment to allow any user to run sudo if they know the password
## of the user they are running the command as (root by default).
# Defaults targetpw  # Ask for the password of the target user
# ALL ALL=(ALL) ALL  # WARNING: only use this together with 'Defaults targetpw'

## Read drop-in files from /etc/sudoers.d
## (the '#' here does not indicate a comment)
#####includedir /etc/sudoers.d

I'd say make sure you user is valid, and sudo group is valid, and remove or comment out the pamuser line under root. then try it again.

changing passwd

[dummy@manjaroieo userx]$ whoami
dummy
[dummy@manjaroieo userx]$ sudo passwd root
New password: 
Retype new password: 
passwd: password updated successfully
[dummy@manjaroieo userx]$

Originally Posted by LinuxRSA when i say sudo passwd root It comes up with this banner.

on most linux systems, this only comes up the first time you use sudo.

in any case, a little research into sudo documentation should solve it quickly:

man sudoers

and search for "lecture" by entering this string:

/lecture