[sudo-users] Defaults authenticate "feature"?

Alek O. Komarnitsky (N-CSC) alek at ast.lmco.com
Wed Dec 22 23:28:14 EST 2004


> From sudo-users-bounces at courtesan.com Wed Dec 22 20:03 MST 2004
> 
> In message <41CA1625.1020706 at qut.edu.au>
> 	so spake Paul Stepowski (p.stepowski):
> 
> > So when you disable user passwords, you're also disabling the
> > output of the sudo banner. This surprised me, I would have
> > thought the two would be independent. So IMHO, it violates
> > the principle of least surprise. It's not a big deal but I'm
> > curious if this was done deliberately.
> 
> This is intentional, the lecture is effectively part of the password
> prompt so if there is no password prompt you don't get lectured.
> 
>  - todd

Just to echo Todd's comments, it seems to me that if an
admin disables user passwords, then they should have 
"lectured" the user before doing so!    ;-)

alek



More information about the sudo-users mailing list