Originally posted by: Xu Hai QX Xi

Hi IBMers:

     We need to upgrade our sudo version from 1.6.9 to 1.8.0 or later on our AIX 7.1 TL0 SP10 system which have PowerHA whose version is 6.1.0 SP17.

Current sudo verison is as below:

$ rpm -q sudo
sudo-1.6.9p15-2noldap

Question:

     How can i upgrade my sudo version.

1). Just download the sudo rpm file (sudo-1.8.20p2) from the below link:

https://www-03.ibm.com/systems/power/software/aix/linux/toolbox/date.html?vm=r&s=1

2). put the file to the server and execute the below command?

rpm -Uvh *.rpm

3). should there any other rpm packets that also need to install or upgrade?

Any advitise is helpful for me

Originally posted by: AyappanP

You are migratng from sudo "noldap" to sudo which has ldap support. You need to install openldap and openldap in turn requires libgcc

And the newer sudo also requires gettext. So below are the packages you have to install before sudo-1.8.20p2. All latest version.

libgcc

gettext

openldap

Another easy approach is to have yum installed which will take care of the dependencies. 

More info --> http://www-03.ibm.com/systems/power/software/aix/linux/toolbox/alpha.html

Get the yum.sh script & run it. This will setup yum but before that make sure you backup the conf files from various rpms since it will get overwritten when/if you update the rpms.

Originally posted by: Xu Hai QX Xi

Hi AyappanP:

     Thank you very much for your reply.

I Checked my environment that only the below rpms are installed.

# rpm -qa
sudo-1.6.9p15-2noldap
unzip-5.51-1
AIX-rpm-7.1.0.2-3

So even if yum.sh will overwrite all of them, that is ok for me.

But unfortunatelly, our environment can not access to the outside network.

So the only way for me is to download  the below four rpms and install them?

sudo

libgcc

gettext

openldap

Also, if i installed them,as the new version is a ldap sudo version, is there any configuration that i need to do?

Will it overwrite the old /etc/sudoers files?

Thank you very much for your help.

Originally posted by: AyappanP

For sudo with ldap configuration , you can refer to this link https://www.sudo.ws/man/sudoers.ldap.man.html

Just updating the sudo rpm will not overwrite the conf files. The overwrite happens if you update rpm itself from version 3 to version 4 and then update the individual rpm packages