Sudoers - group managing and reboot/shutdown
I've got a group (let's say name "group1", ID = 1234) and a user (let's say name "user1", ID="4321"). I want to do two things:
- I want that user to change passwords from other members of that group, but only from that group.
- I want every member of that group to be able to use reboot/poweroff commands without using their password every time.
I have read that page (https://help.ubuntu.com/community/Sudoers) but I am still not able to work out my problems.
sudo users group reboot
edited Dec 16 at 11:48
Rui F Ribeiro
38.9k1479129
asked Jan 9 '15 at 9:51
Artur
1
add a comment |
I've got a group (let's say name "group1", ID = 1234) and a user (let's say name "user1", ID="4321"). I want to do two things:
- I want that user to change passwords from other members of that group, but only from that group.
- I want every member of that group to be able to use reboot/poweroff commands without using their password every time.
I have read that page (https://help.ubuntu.com/community/Sudoers) but I am still not able to work out my problems.
sudo users group reboot
edited Dec 16 at 11:48
Rui F Ribeiro
38.9k1479129
asked Jan 9 '15 at 9:51
Artur
1
Hi! I marked Ask Ubuntu post for deletion. So it should be okey now.
– Artur
Jan 9 '15 at 10:08
Your question would be welcomed better if you posted your attempts and how they failed. Then, it would probably be easier for us to understand how your problem could be worked-around/handled ;)
– John WH Smith
Jan 9 '15 at 11:17
add a comment |
I've got a group (let's say name "group1", ID = 1234) and a user (let's say name "user1", ID="4321"). I want to do two things:
- I want that user to change passwords from other members of that group, but only from that group.
- I want every member of that group to be able to use reboot/poweroff commands without using their password every time.
I have read that page (https://help.ubuntu.com/community/Sudoers) but I am still not able to work out my problems.
sudo users group reboot
edited Dec 16 at 11:48
Rui F Ribeiro
38.9k1479129
asked Jan 9 '15 at 9:51
Artur
1
I've got a group (let's say name "group1", ID = 1234) and a user (let's say name "user1", ID="4321"). I want to do two things:
- I want that user to change passwords from other members of that group, but only from that group.
- I want every member of that group to be able to use reboot/poweroff commands without using their password every time.
I have read that page (https://help.ubuntu.com/community/Sudoers) but I am still not able to work out my problems.
sudo users group reboot
sudo users group reboot
edited Dec 16 at 11:48
Rui F Ribeiro
38.9k1479129
asked Jan 9 '15 at 9:51
Artur
1
edited Dec 16 at 11:48
Rui F Ribeiro
38.9k1479129
asked Jan 9 '15 at 9:51
Artur
1
edited Dec 16 at 11:48
Rui F Ribeiro
38.9k1479129
edited Dec 16 at 11:48
Rui F Ribeiro
38.9k1479129
edited Dec 16 at 11:48
Rui F Ribeiro
38.9k1479129
38.9k1479129
asked Jan 9 '15 at 9:51
Artur
1
asked Jan 9 '15 at 9:51
Artur
1
asked Jan 9 '15 at 9:51
Artur
1
1
Hi! I marked Ask Ubuntu post for deletion. So it should be okey now.
– Artur
Jan 9 '15 at 10:08
Your question would be welcomed better if you posted your attempts and how they failed. Then, it would probably be easier for us to understand how your problem could be worked-around/handled ;)
– John WH Smith
Jan 9 '15 at 11:17
add a comment |
Hi! I marked Ask Ubuntu post for deletion. So it should be okey now.
– Artur
Jan 9 '15 at 10:08
Your question would be welcomed better if you posted your attempts and how they failed. Then, it would probably be easier for us to understand how your problem could be worked-around/handled ;)
– John WH Smith
Jan 9 '15 at 11:17
Hi! I marked Ask Ubuntu post for deletion. So it should be okey now.
– Artur
Jan 9 '15 at 10:08
Hi! I marked Ask Ubuntu post for deletion. So it should be okey now.
– Artur
Jan 9 '15 at 10:08
Your question would be welcomed better if you posted your attempts and how they failed. Then, it would probably be easier for us to understand how your problem could be worked-around/handled ;)
– John WH Smith
Jan 9 '15 at 11:17
Your question would be welcomed better if you posted your attempts and how they failed. Then, it would probably be easier for us to understand how your problem could be worked-around/handled ;)
– John WH Smith
Jan 9 '15 at 11:17
add a comment |
1 Answer
1
active
oldest
votes
Suppose the group id is "foo"
using visudo to change sudo settings:
The % symbol identifies a group
%foo ALL = (root) /usr/bin/reboot
As to password changes you will have to use a script that limits activity - sudo cannot do it all.
Suppose the one special user is peewee
Using visudo add:
User_Alias SPECIAL peewee
SPECIAL ALL = (root) NOPASSWD: /root/special_passwd.shl
As root:
mkdir /root
chmod 750 /root
This is completely untested: name this script special_passwd.shl, place it in the root directory. Permissions = 750
#!/bin/bash
if [ $# -eq 2 ] ; then
# echo username:passwd | chpasswd is the syntax
grp=$(/usr/bin/id -g "$1")
if [ "$grp" = "1234" ]; then
echo ${1}:${2} | /usr/bin/chpasswd
[ $? -eq 0 ] || echo 'password change failed'
fi
else
echo 'No password change: requires username, new password'
fi
You should consider showing what you've tried on this. The script is a starter, not meant for production.
answered Jan 9 '15 at 21:04
jim mcnamara
69448
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f178316%2fsudoers-group-managing-and-reboot-shutdown%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Suppose the group id is "foo"
using visudo to change sudo settings:
The % symbol identifies a group
%foo ALL = (root) /usr/bin/reboot
As to password changes you will have to use a script that limits activity - sudo cannot do it all.
Suppose the one special user is peewee
Using visudo add:
User_Alias SPECIAL peewee
SPECIAL ALL = (root) NOPASSWD: /root/special_passwd.shl
As root:
mkdir /root
chmod 750 /root
This is completely untested: name this script special_passwd.shl, place it in the root directory. Permissions = 750
#!/bin/bash
if [ $# -eq 2 ] ; then
# echo username:passwd | chpasswd is the syntax
grp=$(/usr/bin/id -g "$1")
if [ "$grp" = "1234" ]; then
echo ${1}:${2} | /usr/bin/chpasswd
[ $? -eq 0 ] || echo 'password change failed'
fi
else
echo 'No password change: requires username, new password'
fi
You should consider showing what you've tried on this. The script is a starter, not meant for production.
answered Jan 9 '15 at 21:04
jim mcnamara
69448
add a comment |
Suppose the group id is "foo"
using visudo to change sudo settings:
The % symbol identifies a group
%foo ALL = (root) /usr/bin/reboot
As to password changes you will have to use a script that limits activity - sudo cannot do it all.
Suppose the one special user is peewee
Using visudo add:
User_Alias SPECIAL peewee
SPECIAL ALL = (root) NOPASSWD: /root/special_passwd.shl
As root:
mkdir /root
chmod 750 /root
This is completely untested: name this script special_passwd.shl, place it in the root directory. Permissions = 750
#!/bin/bash
if [ $# -eq 2 ] ; then
# echo username:passwd | chpasswd is the syntax
grp=$(/usr/bin/id -g "$1")
if [ "$grp" = "1234" ]; then
echo ${1}:${2} | /usr/bin/chpasswd
[ $? -eq 0 ] || echo 'password change failed'
fi
else
echo 'No password change: requires username, new password'
fi
You should consider showing what you've tried on this. The script is a starter, not meant for production.
answered Jan 9 '15 at 21:04
jim mcnamara
69448
add a comment |
Suppose the group id is "foo"
using visudo to change sudo settings:
The % symbol identifies a group
%foo ALL = (root) /usr/bin/reboot
As to password changes you will have to use a script that limits activity - sudo cannot do it all.
Suppose the one special user is peewee
Using visudo add:
User_Alias SPECIAL peewee
SPECIAL ALL = (root) NOPASSWD: /root/special_passwd.shl
As root:
mkdir /root
chmod 750 /root
This is completely untested: name this script special_passwd.shl, place it in the root directory. Permissions = 750
#!/bin/bash
if [ $# -eq 2 ] ; then
# echo username:passwd | chpasswd is the syntax
grp=$(/usr/bin/id -g "$1")
if [ "$grp" = "1234" ]; then
echo ${1}:${2} | /usr/bin/chpasswd
[ $? -eq 0 ] || echo 'password change failed'
fi
else
echo 'No password change: requires username, new password'
fi
You should consider showing what you've tried on this. The script is a starter, not meant for production.
answered Jan 9 '15 at 21:04
jim mcnamara
69448
Suppose the group id is "foo"
using visudo to change sudo settings:
The % symbol identifies a group
%foo ALL = (root) /usr/bin/reboot
As to password changes you will have to use a script that limits activity - sudo cannot do it all.
Suppose the one special user is peewee
Using visudo add:
User_Alias SPECIAL peewee
SPECIAL ALL = (root) NOPASSWD: /root/special_passwd.shl
As root:
mkdir /root
chmod 750 /root
This is completely untested: name this script special_passwd.shl, place it in the root directory. Permissions = 750
#!/bin/bash
if [ $# -eq 2 ] ; then
# echo username:passwd | chpasswd is the syntax
grp=$(/usr/bin/id -g "$1")
if [ "$grp" = "1234" ]; then
echo ${1}:${2} | /usr/bin/chpasswd
[ $? -eq 0 ] || echo 'password change failed'
fi
else
echo 'No password change: requires username, new password'
fi
You should consider showing what you've tried on this. The script is a starter, not meant for production.
answered Jan 9 '15 at 21:04
jim mcnamara
69448
answered Jan 9 '15 at 21:04
jim mcnamara
69448
answered Jan 9 '15 at 21:04
jim mcnamara
69448
answered Jan 9 '15 at 21:04
jim mcnamara
69448
69448
add a comment |
add a comment |
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f178316%2fsudoers-group-managing-and-reboot-shutdown%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Hi! I marked Ask Ubuntu post for deletion. So it should be okey now.
– Artur
Jan 9 '15 at 10:08
Your question would be welcomed better if you posted your attempts and how they failed. Then, it would probably be easier for us to understand how your problem could be worked-around/handled ;)
– John WH Smith
Jan 9 '15 at 11:17