AIX Open Source

AIX Open Source

Share your experiences and connect with fellow developers to discover how to build and manage open source software for the AIX operating system

 View Only

  • 1.  sudo trust broken after upgrade

    Posted Wed June 15, 2022 08:54 AM
    Hello,
    I recently upgraded an AIX LPAR from version 71TL3SP9 to version 72TL5SP3 and i am facing an issue with sudo.
    Up until the previous version i could use some scripts that used sudo to execute some commands as root user.
    Today i tried for the first time to run such a script after version upgrade and i found that the sudo trust is broken:

    We trust you have received the usual lecture from the local System
    Administrator. It usually boils down to these two things:

    #1) Respect the privacy of others.
    #2) Think before you type.

    Password:
    Sorry, try again.
    Password:
    Sorry, try again.
    Password:
    Sorry, user bank is not allowed to execute '/usr/sbin/rmuser -p oxste419' as root on e_hercules.

    In attached file you can find the /etc/sudoers file of this host.
    Do i need to change something in sudo configuration for version 7.2?

    This is the installed version of sudo on server:
    lslpp -L |grep -i sudo
    freeware.sudo.rte 1.6.6.0 C F sudo Version 1.6.6

    Let me know if you require any additional information.

    Best Regards,
    Stavros

    ------------------------------
    Stavros Tseriotis
    ------------------------------


  • 2.  RE: sudo trust broken after upgrade

    Posted Wed June 15, 2022 10:45 AM
    Edited by SANKET RATHI Wed June 15, 2022 10:46 AM
    Hi Stavros,
    This looks quite old sudo and also not sure from where did you install this. 
    I think you might want to find the distributor of this package and discuss with them. 




    ------------------------------
    SANKET RATHI
    ------------------------------

    Original Message


  • 3.  RE: sudo trust broken after upgrade

    Posted Wed June 15, 2022 10:59 AM
    Hi Sanket,

    This was installed way back when we installed the LPARS on AIX 6.1.
    We used the DVD of AIX Toolbox (shipped by Bull) to install this package.
    Unfortunately we cannot communicate with them anymore.
    Do you think that if i uninstall this version of sudo and install a new one might fix the problem?

    ------------------------------
    Stavros Tseriotis
    ------------------------------

    Original Message


  • 4.  RE: sudo trust broken after upgrade

    Posted Wed June 15, 2022 01:42 PM

    You could remove the old sudo and install a more current version from the toolbox.

    The AIX Toolbox team recommends using DNF (the next-generation replacement for YUM) to install and manage Open Source software packages and dependencies from the AIX Toolbox.

    See Get Started with the AIX Toolbox for Open Source Software

    • https://www.ibm.com/support/pages/node/6585774
    With Regards,



    ------------------------------
    Jan Harris
    AIX Development Support (Liaison to the AIX Toolbox for Open Source)
    IBM (Contract)
    Austin TX
    ------------------------------

    Original Message


  • 5.  RE: sudo trust broken after upgrade

    Posted Thu June 16, 2022 04:02 AM
    Hello Jan,

    Thank you for your answer and the update you provided on IBM support case as well.
    I verified that i am using a good version of fileset rpm.rte (4.15.1.3).
    I will replace the sudo with the latest version that i can found on the AIX toolbox page that you provided but since all of my AIX servers have no internet connection i guess it does not really have any real value to install dnf right?
    Since i will only perform offline installations.

    Best Regards,

    ------------------------------
    Stavros Tseriotis
    ------------------------------

    Original Message


  • 6.  RE: sudo trust broken after upgrade

    Posted Thu June 16, 2022 10:59 AM
    Hi Stavros

    You might be interested in this option, several customers use this method:

    Creating local repo with DNF and AIX Toolbox Media Image


    I hope this helps!

    ------------------------------
    Jan Harris
    AIX Development Support (Liaison to the AIX Toolbox for Open Source)
    IBM (Contract)
    Austin TX
    ------------------------------

    Original Message


  • 7.  RE: sudo trust broken after upgrade

    Posted Thu June 16, 2022 12:08 PM
    Hello Jan,

    I actually read this article earlier when you send me the first post regarding dnf but it mentions that this method is currently available for AIX 7.3 systems and could be made available in the future for AIX 7.1 and AIX 7.2 systems as well.
    Seeing that this article was published in late February probably it is not yet available for AIX 7.2?

    Best Regards,

    ------------------------------
    Stavros Tseriotis
    ------------------------------

    Original Message


  • 8.  RE: sudo trust broken after upgrade

    Posted Tue June 21, 2022 02:04 PM
    Hi Stavros.
    The 71 and 72 images are available.  I had pinged Sangamesh about this, and he has updated the blog.
    I don't think the new blog features indicate that the articles are updated.


    175892480 Feb 17 01:22 ./ppc/dnf/7.1_7.2/dnf_bundle_aix_71_72.tar
139479040 Feb 17 01:22 ./ppc/dnf/7.3/dnf_bundle_aix_73.tar


    ------------------------------
    Jan Harris
    AIX Development Support (Liaison to the AIX Toolbox for Open Source)
    IBM (Contract)
    Austin TX
    ------------------------------

    Original Message