Best of the Newsgroups: sudo and nis

If this isn't exactly what you wanted, please try our Search (there's a LOT of techy and non-techy stuff here about Linux, Unix, Mac OS X and just computers in general!):

From: Bela Lubkin <belal@sco.com>
Subject: Re: Problems running SUDO on SCO
Date: Tue, 10 Jun 2003 06:52:21 GMT

Eric Weinstein wrote:

> I have a very mixed environment including AIX, Solaris, HP-UX, Linux,
> Tru64, and now SCO. I use SUDO to handle root access to the NIS users,
> using a single, NFS-accessible sudoers file.
> 
> Here is the problem: SUDO on the SCO machine does not seem to be able
> to deal with NIS.
> 
> Running SUDO with an NIS user results in this:
> sudo: uid 17001 does not exist in the passwd file!
> 
> I am sunning SCO OpenServer release 5. The `uname -a` command from my
> SCO machine: SCO_SV cascade 3.2 5.0.6 i386
> 
> The configuration I used for SUDO is:
> ./configure --bindir=/usr/bin --sbindir=/usr/sbin
> --sysconfdir=/XXX/sudo --with-logpath=/XXX/sudo/sudo_cascade.log
> --disable-root-sudo --with-logging=file
> 
> Is there a trick to getting SUDO on SCO to recognize NIS users?
> 
> I've tried this with versions 1.6.3p7 and 1.6.7p5.

I haven't built SUDO myself, so this is just general information.  On
OpenServer, the user lookup routines (getpwent() etc.) in libc do not
see NIS users.  There is an override set of these routines in libsocket,
which does see NIS users.  Therefore, any program which looks up users
and needs to be able to see NIS users, should be linked with libsocket.

Run a make and observe whether "-lsocket" is on the link line.  If not,
fool around with configure, or makefiles, or whatever it takes, to add
it.

If it's already present, there's some other problem...

Macworld Mac Security Superguide $9.99

>Bela<

Many of the products and books I review are things I purchased for my own use. Some were given to me specifically for the purpose of reviewing them.

I resell or can earn commissions from the sale of some of these items. Links within these pages may be affiliate links that pay me for referring you to them. That's mostly insignificant amounts of money; whenever it is not I have made my relationship plain. I also may own stock in companies mentioned here. If you have any question, please do feel free to contact me.