-
Title
When using sudo to become root user the 'passwd' command is not working as expected. -
Description
After using sudo commands like 'sudo su -' to become root and running the passwd command it is not working as expected. It is expected to change the root password at this prompt. However it is attempting to change the password for the user account used to execute the original sudo command.
# passwd
passwd: Changing password for tuser1
New password: -
Cause
This is working as expected during normal sudo operations. Running 'sudo su -' to become root and then running 'who am i' will display the original submit user output, causing the password command to reset the original user's password. -
Resolution
WORKAROUND # 1:
Execute the passwd command and specify the root user.
# passwd root
Changing password for user root.
New password:WORKAROUND # 2:
Edit the /etc/opt/quest/qpm4u/pm.settings file on your clients and set the following:
setutmp yesutmpuser runuser
Information on the settings in the Privilege Manager Admin guide under the Privilege Manager Variable section
Variable: setutmp
Data Type: boolean (YES/NO
Description: Specifies whether pmlocald or pmplugin adds a utmp entryfor the request. Default:YESVariable: utmpuser
Data Type: string
Description: (Privilege Manager for Sudo only) Specifies which user name pmplugin logs to the utmp entry.Valid values are: submituser or runuser
To log an entry to utmp, specify "setutmp yes".Note: These settings only take effect if the sudoers policy allocates a pty. A pseudo-tty is allocated by sudo when the log_input, log_output or use_pty flags are enabled in sudoers policy.
Default: submituser