Re: [gentoo-user] two identical /etc/sudoers -- only one works

2007-05-24 Thread Walter Dnes 
On Wed, May 23, 2007 at 06:14:53PM -0700, maxim wexler wrote
 Hi group,
 
 I connect to the web using
 
 $sudo /usr/sbin/pon isp 
 
 on one machine(2.6.20-gentoo-r6). On another
 machine(2.6.19-gentoo-r5), I get
 
 :sudo: can't open /etc/sudoers: Permission denied.

  Is picky a member of both users and wheel?  Does picky's machine
run PAM?  PAM has additional config files to control access.

-- 
Walter Dnes [EMAIL PROTECTED] In linux /sbin/init is Job #1
Q. Mr. Ghandi, what do you think of Microsoft security?
A. I think it would be a good idea.
-- 
[EMAIL PROTECTED] mailing list

Re: [gentoo-user] two identical /etc/sudoers -- only one works

2007-05-24 Thread maxim wexler 
   Is picky a member of both users and wheel? 

Yes

 Does picky's machine
 run PAM?  PAM has additional config files to control

Yes, and /etc/pam.d/sudo is identical on both machines

Also permissions under /usr/bin/sudo are identical on
both machines: ---s--x--x. As are all other bin and
sbin permissions(generally): 755.




 

Sucker-punch spam with award-winning protection. 
Try the free Yahoo! Mail Beta.
http://advision.webevents.yahoo.com/mailbeta/features_spam.html
-- 
[EMAIL PROTECTED] mailing list

[gentoo-user] two identical /etc/sudoers -- only one works

2007-05-23 Thread maxim wexler 
Hi group,

I connect to the web using

$sudo /usr/sbin/pon isp 

on one machine(2.6.20-gentoo-r6). On another
machine(2.6.19-gentoo-r5), I get

:sudo: can't open /etc/sudoers: Permission denied.

But both files have identical permissions:

[EMAIL PROTECTED] ~ $ ls -l /etc/sudoers
-r--r- 1 root root 1875 Feb  3 21:14 /etc/sudoers

[EMAIL PROTECTED] ~ $ ls -l /etc/sudoers
-r--r- 1 root root 1717 May 23 16:38 /etc/sudoers

I used visudo on both machines and wrote identical
lines in each:

heathen localhost = (root) NOPASSWD: /usr/sbin/pon hd
heathen localhost = (root) NOPASSWD: /usr/sbin/poff hd

usernames of course are different. All other lines are
exact matches.

The non-compliant machine connects but only as root.

This is /etc/group from the machine that works. The
'wheel', 'dialout', 'users', 'root', 'bin', 'daemon',
'sys', 'adm'... lines are the same on both machines:


root:x:0:root
bin:x:1:root,bin,daemon
daemon:x:2:root,bin,daemon
sys:x:3:root,bin,adm
adm:x:4:root,adm,daemon
tty:x:5:
disk:x:6:root,adm
lp:x:7:lp
mem:x:8:
kmem:x:9:
wheel:x:10:root,heathen
floppy:x:11:root
mail:x:12:mail
news:x:13:news
uucp:x:14:uucp
man:x:15:man
cron:x:16:cron
console:x:17:
audio:x:18:heathen
cdrom:x:19:heathen
dialout:x:20:root
ftp:x:21:
sshd:x:22:
at:x:25:at
tape:x:26:root
video:x:27:root,heathen
squid:x:31:squid
gdm:x:32:gdm
xfs:x:33:xfs
games:x:35:
named:x:40:named
mysql:x:60:
postgres:x:70:
cdrw:x:80:heathen
nut:x:84:
usb:x:85:heathen
vpopmail:x:89:
users:x:100:games,heathen
nofiles:x:200:
qmail:x:201:
postfix:x:207:
postdrop:x:208:
smmsp:x:209:smmsp
slocate:x:245:
portage:x:250:portage,heathen
utmp:x:406:
nogroup:x:65533:
nobody:x:65534:
rpc:x:111:
ldap:x:439:

Don't know what else to show the group :(

-Maxim



   
You
 snooze, you lose. Get messages ASAP with AutoCheck
in the all-new Yahoo! Mail Beta.
http://advision.webevents.yahoo.com/mailbeta/newmail_html.html
-- 
[EMAIL PROTECTED] mailing list