Thank you Adam, and everyone else who took the time to reply too. Could
I have a few more minutes of your time please. It's taken me longer than
I thought it would, and I'm so frustrated I don't know what to do. I
must be missing something, but I haven't got the foggiest idea what it
might be. I have the following in the sudoers file (along with some more
comments), but when I try to issue a su command to reboot (su -c reboot
or su -c REBOOT), I'm still getting prompted for the root password. I
have the following in the sudoers file:

# Host alias specification
Host_Alias     SUSE80 = xxx.xxx.xxx.xxx/255.255.255.0
Host_Alias     SUSE10 = xxx.xxx.xxx.xxx/255.255.255.0

# User alias specification
User_Alias     TEST = sue, lou

# Cmnd alias specification
Cmnd_Alias     KILL = /bin/kill
Cmnd_Alias     SHUTDOWN = /sbin/shutdown
Cmnd_Alias     REBOOT = /sbin/reboot, /sbin/fastboot

# Defaults specification
Defaults:sue     !authenticate

# User privilege specification
root     ALL = (ALL) ALL
TEST  ALL = NOPASSWD: KILL, SHUTDOWN, REBOOT
sue      ALL = NOPASSWD: KILL, SHUTDOWN, REBOOT

What do I need to add or change to let sue (my normal userid) issue a
reboot or a shutdown, or something like a 'shutdown -r now' command
without being prompted for the root password? I'm going nuts.

Thank you

Sue


Adam Thornton wrote:
On Jun 17, 2009, at 2:31 PM, Sue Sivets wrote:

Is there any way to give a user the ability to shutdown and reboot a
Suse z/linux system without giving him the root password?  In simple
terms, one of my users is asking for the root password so he can
reboot
the machine when he needs to because the project he's working on has
crashed and generally caused a lot of problems. I found a couple of
notes from 2007 that were about a shutdown userid on a Redhat system.
Will something like that work on a Suse10 system, or is there a better
way of accomplishing what I need? If it will work, can someone tell me
what I need to do in order to make it work?

I was thinking about using SU, but as far as I know, he would still
need
the root password, and then I'm back where I started. Is there a way
to
give him some kind of alternate root password  that doesn't open up
the
whole  ball of wax?

If anyone has any other ideas, I would really like to hear them. I
really don't want to give out the root password if I can avoid it.

The sudo command is built for situations like yours.  Create an /etc/
sudoers file that allows use of /sbin/reboot and /sbin/shutdown (if
that's where they in fact are) for certain users.

Adam

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO LINUX-390
or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

--
Suzanne Sivets
Systems Programmer
Innovation Data Processing
275 Paterson Ave
Little Falls, NJ 07424-1658
973-890-7300
Fax 973-890-7147
[email protected]

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

Reply via email to