[sudo-users] sudo never prompts for password

Donald Jenkins dj.jankins at gmail.com
Sat Nov 27 14:18:58 EST 2010


On 11/26/10, Todd C. Miller <Todd.Miller at courtesan.com> wrote:
> Some vendors build sudo with the exempt_group feature enabled by
> default.  Try running the this on one of the affected servers:
>
> $ sudo sudo -V | grep exempt
>
> If you see something like:
>
> Users in this group are exempt from password and PATH requirements: sudo
>
> then that sudo binary has been compiled such that users in the
> "sudo" group need not enter a password.
>
> You can disable that by adding the following line to sudoers file.
>
>     Defaults !exempt_group
>
>  - todd
>
Hello. I have solved problem now, PAM for sudo was not properly configured.
I looked in both configs on desktop and server and saw that they are different,
one on server lacked pam_unix.so for auth and account. sudo PAM file
was bare su clone. Now problem is solved, thanks for your reply.



More information about the sudo-users mailing list