Solaris 8 compat mode

Wed Feb 5 22:06:59 EST 2003

Try compiling using '--with-pam'.  This tells sudo to invoke the default system behavior.  (Which by default on Solaris 8 if you don't modify /etc/pam.conf tells it to call pam_unix.so.1 which tells it to act like /bin/login, /bin/su, etc.)  BTW on any
Solaris you should not need to modify /etc/pam.conf unless you want to change the way the system behaves.  (regardless of nsswitch.conf  or compat mode)

That should do the trick.
 - Aaron

> From: Greene Jason-RB512C <RB512C at motorola.com>
> Subject: Solairs 8 compat mode
>
> Hello All,
>
> I am having an issue using sudo in (NIS) compat mode on solaris 8.
>
> I currently have several solaris 2.6 machines in this configuration that work.  The passwd file has entries for the users I want to allow on the machine.
> /etc/passwd
> +rb512c
> +:x:::::/bin/false
>
> /etc/nsswitch.conf
> passwd: compat
> group: compat
>
> Sudo works perfect on solaris 2.6 with this setup.  But on solaris 8, sudo will never accept the valid password.  If I change /etc/nsswitch.conf back to "passwd: files nis" then sudo works fine, but I do not get the restricted login I am looking for.
>
> I'm I way off here?  Should I be looking into pam modules now?  I cannot seem to find this problem searching the web.
>
> Thanks in advance,
>
> --
> Jason Greene (rb512c)
>  <mailto:RB512C at email.sps.mot.com> RB512C at email.sps.mot.com
>
> ------_=_NextPart_001_01C2CC91.A4248EFE
> Content-Type: text/html;
>         charset="iso-8859-1"
>
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
> <HTML><HEAD>
> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
>
> <META content="MSHTML 5.50.4731.2200" name=GENERATOR></HEAD>
> <BODY>
> <DIV><FONT face=Arial size=2><SPAN class=990170020-04022003>Hello
> All,</SPAN></FONT></DIV>
> <DIV><FONT face=Arial size=2><SPAN
> class=990170020-04022003></SPAN></FONT> </DIV>
> <DIV><SPAN class=990170020-04022003><FONT face=Arial size=2>I am having an issue
> using sudo in (NIS) compat mode on solaris 8.  </FONT></SPAN></DIV>
> <DIV><SPAN class=990170020-04022003><FONT face=Arial
> size=2></FONT></SPAN> </DIV>
> <DIV><SPAN class=990170020-04022003><FONT face=Arial size=2>I currently have
> several solaris 2.6 machines in this configuration that work.  The passwd
> file has entries for the users I want to allow on the
> machine.</FONT></SPAN></DIV>
> <DIV><SPAN class=990170020-04022003><FONT face=Arial
> size=2>/etc/passwd</FONT></SPAN></DIV>
> <DIV><SPAN class=990170020-04022003><FONT face=Arial
> size=2>+rb512c</FONT></SPAN></DIV>
> <DIV><SPAN class=990170020-04022003><FONT face=Arial
> size=2>+:x:::::/bin/false</FONT></SPAN></DIV>
> <DIV><SPAN class=990170020-04022003><FONT face=Arial
> size=2></FONT></SPAN> </DIV>
> <DIV><SPAN class=990170020-04022003><FONT face=Arial
> size=2>/etc/nsswitch.conf</FONT></SPAN></DIV>
> <DIV><SPAN class=990170020-04022003><FONT face=Arial size=2>passwd:
> compat</FONT></SPAN></DIV>
> <DIV><SPAN class=990170020-04022003><FONT face=Arial size=2>group:
> compat</FONT></SPAN></DIV>
> <DIV><SPAN class=990170020-04022003><FONT face=Arial
> size=2></FONT></SPAN> </DIV>
> <DIV><SPAN class=990170020-04022003><FONT face=Arial size=2>Sudo works perfect
> on solaris 2.6 with this setup.  But on solaris 8, sudo will never accept
> the valid password.  If I change /etc/nsswitch.conf back to "passwd: files
> nis" then sudo works fine, but I do not get the restricted login I am looking
> for.</FONT></SPAN></DIV>
> <DIV><SPAN class=990170020-04022003><FONT face=Arial
> size=2></FONT></SPAN> </DIV>
> <DIV><SPAN class=990170020-04022003><FONT face=Arial size=2>I'm I way off
> here?  Should I be looking into pam modules now?  I cannot seem to
> find this problem searching the web.</FONT></SPAN></DIV>
> <DIV><SPAN class=990170020-04022003><FONT face=Arial
> size=2></FONT></SPAN> </DIV>
> <DIV><SPAN class=990170020-04022003><FONT face=Arial size=2>Thanks in
> advance,</FONT></SPAN></DIV>
> <DIV><SPAN class=990170020-04022003><FONT face=Arial
> size=2></FONT></SPAN> </DIV>
> <DIV><SPAN class=990170020-04022003></SPAN><FONT face=Arial
> size=2>--</FONT></DIV>
> <DIV><FONT face=Arial size=2>Jason Greene (rb512c)</FONT></DIV>
> <DIV><A href="mailto:RB512C at email.sps.mot.com"><FONT face=Arial
> size=2>RB512C at email.sps.mot.com</FONT></A></DIV>
> <DIV>
> <DIV><FONT face=Arial size=2></FONT></DIV>
> <DIV><FONT face=Arial size=2>
> <DIV><FONT face="Comic Sans MS" color=#008080 size=1></FONT></DIV><FONT
> face=Arial></FONT></DIV></FONT></DIV></BODY></HTML>
>
> ------_=_NextPart_001_01C2CC91.A4248EFE--
> ------------------------------
>
> ____________________________________________________________
> sudo-users mailing list <sudo-users at sudo.ws>
> For list information, options, or to unsubscribe, visit:
> http://www.sudo.ws/mailman/listinfo/sudo-users
>
> End of sudo-users Digest, Vol 2, Issue 1
> ****************************************