LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   SUSE / openSUSE (https://www.linuxquestions.org/questions/suse-opensuse-60/)
-   -   Sudo access for a group of users (https://www.linuxquestions.org/questions/suse-opensuse-60/sudo-access-for-a-group-of-users-4175477243/)

slufoot80 09-15-2013 07:34 PM

Sudo access for a group of users
 
Ok I am using a suse linux distribution
Code:

Linux linux-s1tw 2.6.37.1-1.2-default #1 SMP 2011-02-21 10:34:10 +0100 i686 athlon i386 GNU/Linux
I am trying to allow a group of users to change passwords on the system only and they both work but sometimes the sudo doesn't work and I have to reset the users password and then it works see below

Code:

mtolbert@linux-s1tw:~> sudo -l
mtolbert's password:
Sorry, try again.

Then when I change the password it works but then it after a little while I have to change the password again.

Line from /etc/sudoers file

Code:

%techteam ALL=(ALL) PASSWD: /usr/bin/passwd
Code:

Defaults timestamp_timeout=1
Output from groups command

Code:

groups mtolbert
mtolbert : techteam


rtmistler 09-16-2013 09:29 AM

What are the permissions on /usr/bin/passwd? They should be 755 with the suid bit set so it shows as rwsr-xr-x.

If passwd isn't set like that, as root do the following:

Code:

chmod 4755 passwd
This will make it so that the normal users can execute passwd, but not delete it, and when they execute it, they will have root privileges so that they can change their passwords properly. This is the normal way it is done unless you employ a script to check the form and syntax of passwords to not allow them to create too simple ones.


All times are GMT -5. The time now is 03:55 PM.