[sudo-users] Sudo failing to invoke password prompt with 1.7.8+ on AIX
Albert Chin
sudo-users at mlists.thewrittenword.com
Fri Jan 24 10:10:31 MST 2014
I've build sudo-1.7.7 and sudo-1.7.8 on AIX 6.1 as follows:
$ cd /opt/build/china
$ gtar zxf sudo-1.7.7.tar.gz
$ cd sudo-1.7.7
$ CONFIG_SHELL=/opt/fsw/bash42/bin/bash bash configure CC=xlc \
CFLAGS="-O2 -qro -qroconst -qmaxmem=-1 -qarch=ppc" NROFFPROG=nroff \
--disable-path-info --enable-shell-sets-home --enable-log-host \
--with-logfac=auth --with-env-editor --with-ignore-dot \
--without-lecture --with-logging=syslog --with-goodpri=notice \
--with-badpri=alert --disable-sia --disable-root-mailer \
--without-blibpath --sysconfdir=/opt/fsw/sudo177/etc \
--prefix=/opt/fsw/sudo177
...
$ gmake
# gmake install
$ gtar zxf sudo-1.7.8.tar.gz
$ cd sudo-1.7.8
$ CONFIG_SHELL=/opt/fsw/bash42/bin/bash bash configure CC=xlc \
CFLAGS="-O2 -qro -qroconst -qmaxmem=-1 -qarch=ppc" NROFFPROG=nroff \
--disable-path-info --enable-shell-sets-home --enable-log-host \
--with-logfac=auth --with-env-editor --with-ignore-dot \
--without-lecture --with-logging=syslog --with-goodpri=notice \
--with-badpri=alert --disable-sia --disable-root-mailer \
--without-blibpath --sysconfdir=/opt/fsw/sudo178/etc \
--prefix=/opt/fsw/sudo178
...
$ gmake
# gmake install
$ cat /opt/fsw/sudo177/etc/sudoers
root ALL=(ALL) ALL
china ALL = /usr/sbin/installp
$ cat /opt/fsw/sudo178/etc/sudoers
root ALL=(ALL) ALL
china ALL = /usr/sbin/installp
$ id
uid=1000(china) gid=1000(china)
$ /opt/fsw/sudo177/bin/sudo -k
$ /opt/fsw/sudo177/bin/sudo -l
Password: <enter password>
User china may run the following commands on this host:
(root) /usr/sbin/installp
$ /opt/fsw/sudo178/bin/sudo -k
$ /opt/fsw/sudo178/bin/sudo -l
Sorry, try again.
Sorry, try again.
Sorry, try again.
sudo: 3 incorrect password attempts
I've also tried sudo-1.8.9p4 and received the same error. So,
something changed in 1.7.8 to cause this.
Note I have not configured with --with-pam.
--
albert chin (china at thewrittenword.com)
More information about the sudo-users
mailing list