LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   SUSE / openSUSE (https://www.linuxquestions.org/questions/suse-opensuse-60/)
-   -   SuSE93 Root password rejected from normal user mode (No Sudo, No YaST) (https://www.linuxquestions.org/questions/suse-opensuse-60/suse93-root-password-rejected-from-normal-user-mode-no-sudo-no-yast-527226/)

Peacepunk 02-10-2007 01:21 AM

SuSE93 Root password rejected from normal user mode (No Sudo, No YaST)
 
Hi Community

I've seen this on the formum, but none help:

None of the users can "sudo" or access admin privileges on my SuSE93 box, when prompt for password it's stated as "incorrect"

-I can still log as root
-I changed the root password

-All users (3) face the same issue.
-Main User is set to group Wheel (thsi doesn't look to dangerous to edit)

At some point on these forums, I found advice on the need to do "visudo" (edit my sudoers' profile specs). It looks frightening, I don't wan't to play with that fiel without a bit more assistance.

-Name of my main user: "jph"
-Name of restricted users (no admin, no root shell, but dvdrom mount, scanning & printing ok): "moufflets";"poutou"

-Actual content of my sudoers:

Quote:

# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#

# Host alias specification

# User alias specification

# Cmnd alias specification

# Defaults specification
Defaults targetpw # ask for the password of the target user i.e. root
%users ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'!

# Runas alias specification

# User privilege specification
root ALL=(ALL) ALL

# Uncomment to allow people in group wheel to run all commands
%wheel ALL=(ALL) ALL

# Same thing without a password
# %wheel ALL=(ALL) NOPASSWD: ALL

# Samples
# %users ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users localhost=/sbin/shutdown -h now
~
~
~
~
~
~
1,1 Al
Word of advice ?

Thanks

Jean-Philippe.

jschiwal 02-10-2007 05:57 PM

%wheel ALL=(ALL) ALL

If you uncomment this line, then members of group wheel can use sudo.
You need to include the full pathname when using sudo. This is a precaution in case someone has inserted an identically named program in your PATH.

For example: "sudo /sbin/route" instead of "sudo route".

Members of the wheel group don't magically get extra access. It is a convenient standardized name for the group that is allowed administrative access when configured. In other words, it's the group name in /etc/sudoers that is assumed you want to use.

Peacepunk 02-11-2007 06:34 PM

Hmm...

I lost the ability to sudo with my latest mods

Code:

sudo /sbin/YaST2 returns

sudo: must be setuid root

According to MAN pages, I tried to add my normal user to do it all (Don't like that, but...)

Fail again, can't su, can't sudo, can't do admin things either

Mod lines in sudoers:

Code:

# User alias specification
User_Alias    FULLTIMERS = jph


# Cmnd alias specification

# Defaults specification
Defaults targetpw    # ask for the password of the target user i.e. root
%users ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'!

# Runas alias specification

# User privilege specification
root        ALL=(ALL) ALL

# Uncomment to allow people in group wheel to run all commands
%wheel        ALL=(ALL)        ALL
FULLTIMERS    ALL=NOPASSWD: ALL

# Same thing without a password
# %wheel        ALL=(ALL)        NOPASSWD: ALL

???

Jean-Philippe


All times are GMT -5. The time now is 06:13 PM.