Arch Linux

uorbe001

Member

Registered: 2008-04-11

Posts: 27

[Solved]Sudo doesn't ask me for password >.<

Hi everyone, I've been playing around with my pam.d configuration files trying to configure my fingerprint reader, but I think I made a mistake and sudo doesn't ask me for my password anymore (nor for my fingerprint), it grants me permission automatically...
This is my /etc/pam.d/sudo file:

auth    sufficient    pam_fprint.so
auth    required    pam_unix.so try_first_pass nullok_secure 
auth    required    pam_nologin.so

I've tried removing the "auth    sufficient    pam_fprint.so"  line and the "try_first_pass nullok_secure" but it doesn't work and I don't feel secure if it grants premissions so easily...
Anyone has a clue about what can be wrong? Thanks!

Last edited by uorbe001 (2009-01-22 19:03:26)

mcmillan

Member

Registered: 2006-04-06

Posts: 737

Re: [Solved]Sudo doesn't ask me for password >.<

If you think it's a sudo configuration posting /etc/sudoers might be helpful to look at as well.

pointone

Wiki Admin

From: Waterloo, ON

Registered: 2008-02-21

Posts: 379

Re: [Solved]Sudo doesn't ask me for password >.<

Simply removing the pam_fprint.so line should bring you back close to default. However, your sudo timeout is probably still in effect, which is why you are still granted permissions without a password after making the change.

---

M*cr*s*ft: Who needs quality when you have marketing?

oliver

Member

Registered: 2007-12-12

Posts: 448

Re: [Solved]Sudo doesn't ask me for password >.<

sudo -l

will give you your permissions as configured in /etc/sudoers... the last entry in /etc/sudoers takes precedence.  (that is an "ell", not a "one")

uorbe001

Member

Registered: 2008-04-11

Posts: 27

Re: [Solved]Sudo doesn't ask me for password >.<

Simply removing the pam_fprint.so line should bring you back close to default. However, your sudo timeout is probably still in effect, which is why you are still granted permissions without a password after making the change.

Yup, that was the problem >.< I thought the timeout didn't work when rebooting, but it does, so it's everything alright... Thanks to everyone anyway!