sudo not allowing access [solved]

grx · Last edited by grx on Mon Apr 17, 2006 6:24 pm; edited 1 time in total

I've put these lines into /etc/sudoers:

phajdan.jr · Posted: Mon Apr 17, 2006 6:52 am Post subject:

Change 'localhost' to 'ALL'.

grx · Posted: Mon Apr 17, 2006 2:18 pm Post subject:

That works, but I'd rather not make it possible to sudo remotely. What do I have to fix to get it to work that way?

phajdan.jr · Posted: Mon Apr 17, 2006 5:40 pm Post subject:

Well, it doesn't work like that. There is a 'host' entry because the same sudoers file can be used on several machines. Then each computer reads only 'his' entries... It's not a host you connect from, but a host you run command on.

I don't know how to setup it in the way you want. You could create another user, not allowed to connect remotely etc. But in my opinion there is nothing to worry about. Just give the user a strong password, block the account after say 3 failed login attempts, maybe with some combination with port knocking / one time passwords... It should be quite safe, really.

grx · Posted: Mon Apr 17, 2006 6:23 pm Post subject:

Actually, I just discovered that the problem is the "localhost". It needs the actual host name, so when I change it to "washington", it works fine. Thinking about it, I decided to keep the ALL anyway. Thanks all!