Sudo is not woking on my centos7.3

[xq10907]

Hello guys

I added local user test to /etc/sudoers via visudo as follows

Code: Select all

## Next comes the main part: which users can run what software on
## which machines (the sudoers file can be shared between multiple
## systems).
## Syntax:
##
##      user    MACHINE=COMMANDS
##
## The COMMANDS section may have other options added to it.
##
## Allow root to run any commands anywhere
root    ALL=(ALL)       ALL
test    ALL=(ALL)       ALL

then su to test,run command as root get error says the user in not in sudoers file,please give some suggestion,thanks

Code: Select all

[root@ark-centos-smb4 ~]# su - test
Last login: Tue Aug  8 01:03:48 PDT 2017 on pts/0
[test@ark-centos-smb4 ~]$ sudo ls /root/
[sudo] password for test:
test is not in the sudoers file.  This incident will be reported.

[simon_lefisch]

Remove the "test" user from the sudoers file and run the command below as root to give the user sudo priveldges:

Code: Select all

usermod -aG sudo <username>

Replace username with the correct user

[TrevorH]

And replace "sudo" with "wheel" as there is no sudo group in CentOS.

[xq10907]

Still not working after adding test to wheel group,see below commands,it really frustrate me,i referred to posts on web,it seems doesn't involved complicated configuration,my centos has samba,ssssd,kerberos configured,joined windows domain via realm, not sure these will affect sudo's functioning
Thanks

Code: Select all

[test@ark-centos-smb4 ~]$ groups test
test : bin wheel
[test@ark-centos-smb4 ~]$ sudo ls /root/
[sudo] password for test:
test is not in the sudoers file.  This incident will be reported.

collected /var/log/secure contents while running above sudo command with test user,no idea what was complain?

Code: Select all

Aug  9 00:30:53 ark-centos-smb4 sudo: pam_unix(sudo:auth): authentication failure; logname=test uid=39984 euid=0 tty=/dev/pts/2 ruser=test rhost=  user=test
Aug  9 00:30:56 ark-centos-smb4 sudo: pam_unix(sudo:auth): conversation failed
Aug  9 00:30:56 ark-centos-smb4 sudo: pam_unix(sudo:auth): auth could not identify password for [test]
Aug  9 00:30:56 ark-centos-smb4 sudo:    test : pam_authenticate: Conversation error ; TTY=pts/2 ; PWD=/home/test ; USER=root ; COMMAND=/usr/bin/ls /root
Aug  9 00:30:56 ark-centos-smb4 sudo:    test : user NOT in sudoers ; TTY=pts/2 ; PWD=/home/test ; USER=root ; COMMAND=/usr/bin/ls /root
Aug  9 00:31:02 ark-centos-smb4 sudo:    test : user NOT in sudoers ; TTY=pts/2 ; PWD=/home/test ; USER=root ; COMMAND=/usr/bin/ls /root

[TrevorH]

Does it have a password set?

[xq10907]

Does it have a password set?

yes,I tried login centos with test's password it's working

[TrevorH]

What's the output from ls -laZ /etc/{passwd,shadow}

[xq10907]

What's the output from ls -laZ /etc/{passwd,shadow}

Here it is

Code: Select all

[root@ark-centos-smb4 ~]# ls -laZ /etc/passwd
-rw-r--r-- root root ?                                /etc/passwd
[root@ark-centos-smb4 ~]#  ls -laZ /etc/shadow
---------- root root ?                                /etc/shadow

[TrevorH]

selinux is disabled?

[xq10907]

selinux is disabled?

Yes should i change selinux to enforcing or permissive? according to web threads,enforcing is default after installation
thanks