0
votes
1answer
82 views

I can't make sudo su on old version CentOS with LDAP

I configured many servers with the option to make "sudo su" with ldap users, and works fine. But in 2 servers (CentOS 5.7 and 5.5) this option show me an error: [user] is not in the sudoers ...
1
vote
2answers
373 views

How to allow unprivileged apache/PHP to do a root task (CentOS)

I am setting up a sort of personal dropbox for our customers on a CentOS 6.3 machine. The server will be accessible thru SFTP and a proprietary http service base on PHP. This machine will be in our ...
1
vote
2answers
285 views

allowing sudo to delete certain files

I would like to allow to delete certain files in /tmp directory to sudo users. I have added the Allow_Cmnd /usr/sbin/userdel for sudo users but this does not delete all /tmp files associated with the ...
2
votes
1answer
408 views

Why is visudo saying there's a syntax error?

I'm using CentOS uname -a Linux mydomain.com 3.2.29-48.63.amzn1.x86_64 #1 SMP Sat Sep 15 01:43:12 UTC 2012 x86_64 x86_64 x86_64 GNU/Linux I'm trying to add this command to my /etc/sudoers file ...
3
votes
1answer
1k views

What are the security implications of disabling requiretty in sudoers?

If we add the following lines to sudoers: Defaults requiretty Defaults:apache !requiretty apache ALL=NOPASSWD: /etc/init.d/httpd graceful What are the security implications? My understanding is ...
0
votes
3answers
1k views

Running a command through a tty without commenting out “requiretty”

I'm running the latest version of Jenkins on CentOS. In my Jenkins job, I can run post build steps, and included this command, sudo /bin/rm /usr/java/jboss/server/default/deploy/myclient-1.0.war ...
1
vote
1answer
95 views

Allow a group to run all files under a certain directory in CentOS

I am trying to set up automatic deployment for my Rails app using Capistrano. Capistrano will need to run sudo kill, and I achieved that without it asking me for a password, by editing the ...
0
votes
1answer
583 views

audit_log_user_command(): Connection refused when using sudo, what's wrong?

i ssh to my remote centos sever as hugemeow, then i run sudo ls, then error happens: [hugemeow@home ~]$ sudo ls **audit_log_user_command(): Connection refused** httpd hugemeow is in /etc/sudoers, ...
3
votes
3answers
114 views

SSH access and control

IS there an ideal way to limit access to server admins as to what they can and can not do with sudo? I would like to have levels of access from basic command line actions to more advanced abilities ...
0
votes
2answers
209 views

adding users to sudoers - problem

I have created a user, named test, now I want to give this user root privileges, so as root, I've added this user to the sudoers list in CentOS. root ALL=(ALL) ALL test ALL=(ALL) ...
1
vote
3answers
3k views

sudoers config to allow edit of files in particular directory (and children)

How can I provide sudo access for a user, but restrict them to only editing of files, and only files that are under a nominated directory. For example, I would like the userabc to be able to edit all ...
2
votes
1answer
1k views

RHEL4/CentOS4 setting up SUDOERS from LDAP

I built the server based on this guide, but i skipped the samba part. (CentOS 5.x Samba Domain Controller With LDAP Backend) I added in sudoers support based on this guide. (Sudoers LDAP Manual) ...
2
votes
2answers
965 views

Problems restarting apache via PHP (even with sudo)

As part of the signup process on our site, VirtualHost directives get created an added to a config file via PHP, after each VirtualHost is created apache is restarted gracefully so that the new site ...
0
votes
3answers
921 views

sudo: apache restarting a service on CentOS

I need my web app to restart the dansguardian service (on CentOS) so it needs to run '/sbin/service dansguardian restart' I have a shellscript in /home/topological called apacherestart.sh which does ...