Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can't sudo anymore after hardening #518

Closed
DoudouJack opened this issue Dec 20, 2021 · 1 comment
Closed

Can't sudo anymore after hardening #518

DoudouJack opened this issue Dec 20, 2021 · 1 comment

Comments

@DoudouJack
Copy link

Describe the bug
After running the hardening script, any user using sudo will get "Sorry, please try again" after inputting password

Expected behavior
sudo su -> input password -> switched to root user
or
sudo apt update -> input password -> apt update is executed

Actual behavior

[sudo] password for USER:
Sorry, try again.

where USER is the username having the issue

auth.log output

sudo: pam_unix(sudo:auth): authentication failure; logname=USER uid=1001 euid=0 tty=/dev/pts/0 ruser=USER rhost= user=USER

where USER is the username having the issue

OS / Environment
Ubuntu 20.04.3 LTS (Virtual Machine managed from vSphere)

Ansible Version

ansible [core 2.11.7]

Additional context
This happens with any user, also to newly created ones after the script had been ran. auth.log gives password error, whereas passwords have been checked and newly created for new users. It seems a parameter has been set to not allow sudo to users, even when adding the users to sudo group.
Could you please indicate what change could have modified this behaviour?
Thank you in advance

@rndmh3ro
Copy link
Member

Can you please share the playbook including any variables you used? Also what version of the collection are you using? Do you use sssd?

It seems a parameter has been set to not allow sudo to users, even when adding the users to sudo group.

We don't modify anything sudo-related.

@rndmh3ro rndmh3ro closed this as completed May 9, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants