how to enforce password in sudoers configuration for user that doesn't have password set?
Clash Royale CLAN TAG#URR8PPP
up vote
1
down vote
favorite
I have a group of users (wheel for example) that I want to add to /etc/sudoers for all commands i.e.:
%wheel ALL=(ALL) ALL
In this scenario, if users are set up correctly, everyone in wheel will be prompted for password upon trying to use an elevated command. For any user that does not have a password set (via /etc/shadow), the user will not be prompted for a password and command will succeed....this presents a problem for me. I do not want users with no passwords set to be able to succeed in doing this.
I cannot find a possible way, specifically just through /etc/sudoers, to make any elevated command fail with users with no passwords set. Let me know if I am missing something...
And yes, I know I can approach the problem differently outside of /etc/sudoers (chicken and egg) and know of ways to do it...not question of that though. Any tips would be greatly appreciated!
linux shell sudo users authentication
asked Sep 26 '17 at 22:11
blieberman
62
add a comment |Â
up vote
1
down vote
favorite
I have a group of users (wheel for example) that I want to add to /etc/sudoers for all commands i.e.:
%wheel ALL=(ALL) ALL
In this scenario, if users are set up correctly, everyone in wheel will be prompted for password upon trying to use an elevated command. For any user that does not have a password set (via /etc/shadow), the user will not be prompted for a password and command will succeed....this presents a problem for me. I do not want users with no passwords set to be able to succeed in doing this.
I cannot find a possible way, specifically just through /etc/sudoers, to make any elevated command fail with users with no passwords set. Let me know if I am missing something...
And yes, I know I can approach the problem differently outside of /etc/sudoers (chicken and egg) and know of ways to do it...not question of that though. Any tips would be greatly appreciated!
linux shell sudo users authentication
asked Sep 26 '17 at 22:11
blieberman
62
decided to be enforced with some pam module configuration
– blieberman
Sep 27 '17 at 15:41
add a comment |Â
up vote
1
down vote
favorite
up vote
1
down vote
favorite
I have a group of users (wheel for example) that I want to add to /etc/sudoers for all commands i.e.:
%wheel ALL=(ALL) ALL
In this scenario, if users are set up correctly, everyone in wheel will be prompted for password upon trying to use an elevated command. For any user that does not have a password set (via /etc/shadow), the user will not be prompted for a password and command will succeed....this presents a problem for me. I do not want users with no passwords set to be able to succeed in doing this.
I cannot find a possible way, specifically just through /etc/sudoers, to make any elevated command fail with users with no passwords set. Let me know if I am missing something...
And yes, I know I can approach the problem differently outside of /etc/sudoers (chicken and egg) and know of ways to do it...not question of that though. Any tips would be greatly appreciated!
linux shell sudo users authentication
asked Sep 26 '17 at 22:11
blieberman
62
I have a group of users (wheel for example) that I want to add to /etc/sudoers for all commands i.e.:
%wheel ALL=(ALL) ALL
In this scenario, if users are set up correctly, everyone in wheel will be prompted for password upon trying to use an elevated command. For any user that does not have a password set (via /etc/shadow), the user will not be prompted for a password and command will succeed....this presents a problem for me. I do not want users with no passwords set to be able to succeed in doing this.
I cannot find a possible way, specifically just through /etc/sudoers, to make any elevated command fail with users with no passwords set. Let me know if I am missing something...
And yes, I know I can approach the problem differently outside of /etc/sudoers (chicken and egg) and know of ways to do it...not question of that though. Any tips would be greatly appreciated!
linux shell sudo users authentication
linux shell sudo users authentication
asked Sep 26 '17 at 22:11
blieberman
62
asked Sep 26 '17 at 22:11
blieberman
62
asked Sep 26 '17 at 22:11
blieberman
62
asked Sep 26 '17 at 22:11
blieberman
62
asked Sep 26 '17 at 22:11
blieberman
62
62
decided to be enforced with some pam module configuration
– blieberman
Sep 27 '17 at 15:41
add a comment |Â
decided to be enforced with some pam module configuration
– blieberman
Sep 27 '17 at 15:41
decided to be enforced with some pam module configuration
– blieberman
Sep 27 '17 at 15:41
decided to be enforced with some pam module configuration
– blieberman
Sep 27 '17 at 15:41
add a comment |Â
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f394643%2fhow-to-enforce-password-in-sudoers-configuration-for-user-that-doesnt-have-pass%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
decided to be enforced with some pam module configuration
– blieberman
Sep 27 '17 at 15:41