Open Source Development

Power Open Source Development

Explore the open source tools and capabilities for building and deploying modern applications on IBM Power platforms including AIX, IBM i, and Linux.


#Power


#Power


#Servers
#Opensource
 View Only

  • 1.  sudo trust broken after upgrade

    Posted 06/15/22 08:54 AM
    Hello,
    I recently upgraded an AIX LPAR from version 71TL3SP9 to version 72TL5SP3 and i am facing an issue with sudo.
    Up until the previous version i could use some scripts that used sudo to execute some commands as root user.
    Today i tried for the first time to run such a script after version upgrade and i found that the sudo trust is broken:

    We trust you have received the usual lecture from the local System
    Administrator. It usually boils down to these two things:

    #1) Respect the privacy of others.
    #2) Think before you type.

    Password:
    Sorry, try again.
    Password:
    Sorry, try again.
    Password:
    Sorry, user bank is not allowed to execute '/usr/sbin/rmuser -p oxste419' as root on e_hercules.

    In attached file you can find the /etc/sudoers file of this host.
    Do i need to change something in sudo configuration for version 7.2?

    This is the installed version of sudo on server:
    lslpp -L |grep -i sudo
    freeware.sudo.rte 1.6.6.0 C F sudo Version 1.6.6

    Let me know if you require any additional information.

    Best Regards,
    Stavros

    ------------------------------
    Stavros Tseriotis
    ------------------------------

    #AIXOpenSource


  • 2.  RE: sudo trust broken after upgrade

    Posted 06/15/22 10:45 AM
    Edited by SANKET RATHI 06/15/22 10:46 AM
    Hi Stavros,
    This looks quite old sudo and also not sure from where did you install this. 
    I think you might want to find the distributor of this package and discuss with them. 




    ------------------------------
    SANKET RATHI
    ------------------------------



  • 3.  RE: sudo trust broken after upgrade

    Posted 06/15/22 10:59 AM
    Hi Sanket,

    This was installed way back when we installed the LPARS on AIX 6.1.
    We used the DVD of AIX Toolbox (shipped by Bull) to install this package.
    Unfortunately we cannot communicate with them anymore.
    Do you think that if i uninstall this version of sudo and install a new one might fix the problem?

    ------------------------------
    Stavros Tseriotis
    ------------------------------

    Original Message


  • 4.  RE: sudo trust broken after upgrade

    Posted 06/15/22 01:42 PM

    You could remove the old sudo and install a more current version from the toolbox.

    The AIX Toolbox team recommends using DNF (the next-generation replacement for YUM) to install and manage Open Source software packages and dependencies from the AIX Toolbox.

    See Get Started with the AIX Toolbox for Open Source Software

    • https://www.ibm.com/support/pages/node/6585774
    With Regards,



    ------------------------------
    Jan Harris
    AIX Development Support (Liaison to the AIX Toolbox for Open Source)
    IBM (Contract)
    Austin TX
    ------------------------------

    Original Message


  • 5.  RE: sudo trust broken after upgrade

    Posted 06/16/22 04:02 AM
    Hello Jan,

    Thank you for your answer and the update you provided on IBM support case as well.
    I verified that i am using a good version of fileset rpm.rte (4.15.1.3).
    I will replace the sudo with the latest version that i can found on the AIX toolbox page that you provided but since all of my AIX servers have no internet connection i guess it does not really have any real value to install dnf right?
    Since i will only perform offline installations.

    Best Regards,

    ------------------------------
    Stavros Tseriotis
    ------------------------------

    Original Message


  • 6.  RE: sudo trust broken after upgrade

    Posted 06/16/22 10:59 AM
    Hi Stavros

    You might be interested in this option, several customers use this method:

    Creating local repo with DNF and AIX Toolbox Media Image


    I hope this helps!

    ------------------------------
    Jan Harris
    AIX Development Support (Liaison to the AIX Toolbox for Open Source)
    IBM (Contract)
    Austin TX
    ------------------------------

    Original Message


  • 7.  RE: sudo trust broken after upgrade

    Posted 06/16/22 12:08 PM
    Hello Jan,

    I actually read this article earlier when you send me the first post regarding dnf but it mentions that this method is currently available for AIX 7.3 systems and could be made available in the future for AIX 7.1 and AIX 7.2 systems as well.
    Seeing that this article was published in late February probably it is not yet available for AIX 7.2?

    Best Regards,

    ------------------------------
    Stavros Tseriotis
    ------------------------------

    Original Message


  • 8.  RE: sudo trust broken after upgrade

    Posted 06/21/22 02:04 PM
    Hi Stavros.
    The 71 and 72 images are available.  I had pinged Sangamesh about this, and he has updated the blog.
    I don't think the new blog features indicate that the articles are updated.


    175892480 Feb 17 01:22 ./ppc/dnf/7.1_7.2/dnf_bundle_aix_71_72.tar
139479040 Feb 17 01:22 ./ppc/dnf/7.3/dnf_bundle_aix_73.tar


    ------------------------------
    Jan Harris
    AIX Development Support (Liaison to the AIX Toolbox for Open Source)
    IBM (Contract)
    Austin TX
    ------------------------------

    Original Message


Related Content