Thank you Adam, and everyone else who took the time to reply too. Could
I have a few more minutes of your time please. It's taken me longer than
I thought it would, and I'm so frustrated I don't know what to do. I
must be missing something, but I haven't got the foggiest idea what it
might be. I have the following in the sudoers file (along with some more
comments), but when I try to issue a su command to reboot (su -c reboot
or su -c REBOOT), I'm still getting prompted for the root password. I
have the following in the sudoers file:
# Host alias specification
Host_Alias SUSE80 = xxx.xxx.xxx.xxx/255.255.255.0
Host_Alias SUSE10 = xxx.xxx.xxx.xxx/255.255.255.0
# User alias specification
User_Alias TEST = sue, lou
# Cmnd alias specification
Cmnd_Alias KILL = /bin/kill
Cmnd_Alias SHUTDOWN = /sbin/shutdown
Cmnd_Alias REBOOT = /sbin/reboot, /sbin/fastboot
# Defaults specification
Defaults:sue !authenticate
# User privilege specification
root ALL = (ALL) ALL
TEST ALL = NOPASSWD: KILL, SHUTDOWN, REBOOT
sue ALL = NOPASSWD: KILL, SHUTDOWN, REBOOT
What do I need to add or change to let sue (my normal userid) issue a
reboot or a shutdown, or something like a 'shutdown -r now' command
without being prompted for the root password? I'm going nuts.
Thank you
Sue
Adam Thornton wrote:
On Jun 17, 2009, at 2:31 PM, Sue Sivets wrote:
Is there any way to give a user the ability to shutdown and reboot a
Suse z/linux system without giving him the root password? In simple
terms, one of my users is asking for the root password so he can
reboot
the machine when he needs to because the project he's working on has
crashed and generally caused a lot of problems. I found a couple of
notes from 2007 that were about a shutdown userid on a Redhat system.
Will something like that work on a Suse10 system, or is there a better
way of accomplishing what I need? If it will work, can someone tell me
what I need to do in order to make it work?
I was thinking about using SU, but as far as I know, he would still
need
the root password, and then I'm back where I started. Is there a way
to
give him some kind of alternate root password that doesn't open up
the
whole ball of wax?
If anyone has any other ideas, I would really like to hear them. I
really don't want to give out the root password if I can avoid it.
The sudo command is built for situations like yours. Create an /etc/
sudoers file that allows use of /sbin/reboot and /sbin/shutdown (if
that's where they in fact are) for certain users.
Adam
----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO LINUX-390
or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
Suzanne Sivets
Systems Programmer
Innovation Data Processing
275 Paterson Ave
Little Falls, NJ 07424-1658
973-890-7300
Fax 973-890-7147
[email protected]
----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390