[sudo-users] Disabling timestamp message on HP-UX

[Todd C. Miller]

In message <A0109B26D9F05041ACFA5A8DF254135D8A8742 at sthmail.aetinc.net>
	so spake "Powell_Stuart" (spowell):

> I recently installed sudo 1.6.9p8 on two new HP-UX 11i V3 integrity
> systems.  I haven't made many modifications to the sudoers files.  There
> are only three users configured so far and they are all in the root
> group with full access to everything.  Whenever I enter a command via
> sudo I receive the message detailing the last successful login on the
> system and the last authentication failure on the system.  Similar to
> below:
> Last successful login:       Tue Aug 26 08:53:35 EDT 2008
> pthspowell.aetinc.net 
>  
> Last authentication failure: Wed Jul 30 11:46:07 EDT 2008
> pthspowell.aetinc.net
> This text is distracting when troubleshooting a problem.  Any
> suggestions on eliminating the prompts?  

That text is coming from PAM.  My guess is that it is the hpsec PAM
module that prints it.  Try adding the following to your
pam.conf and see if it changes the behavior:

sudo     auth required          libpam_hpsec.so.1 bypass_setaud
sudo     auth sufficient        libpam_unix.so.1
sudo     auth required          libpam_ldap.so.1 try_first_pass
sudo     account required       libpam_hpsec.so.1
sudo     account sufficient     libpam_unix.so.1
sudo     account required       libpam_ldap.so.1

 - todd