Sudo access for a group of users

slufoot80 · 09-15-2013, 07:34 PM

Ok I am using a suse linux distribution

Code:

Linux linux-s1tw 2.6.37.1-1.2-default #1 SMP 2011-02-21 10:34:10 +0100 i686 athlon i386 GNU/Linux

I am trying to allow a group of users to change passwords on the system only and they both work but sometimes the sudo doesn't work and I have to reset the users password and then it works see below

Code:

mtolbert@linux-s1tw:~> sudo -l
mtolbert's password:
Sorry, try again.

Then when I change the password it works but then it after a little while I have to change the password again.

Line from /etc/sudoers file

Code:

%techteam ALL=(ALL) PASSWD: /usr/bin/passwd

Code:

Defaults timestamp_timeout=1

Output from groups command

Code:

groups mtolbert
mtolbert : techteam

rtmistler · 09-16-2013, 09:29 AM

What are the permissions on /usr/bin/passwd? They should be 755 with the suid bit set so it shows as rwsr-xr-x.

If passwd isn't set like that, as root do the following:

Code:

chmod 4755 passwd

This will make it so that the normal users can execute passwd, but not delete it, and when they execute it, they will have root privileges so that they can change their passwords properly. This is the normal way it is done unless you employ a script to check the form and syntax of passwords to not allow them to create too simple ones.