https://bugzilla.novell.com/show_bug.cgi?id=339925#c1 Mark Gordon changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mtgordon@novell.com Status|NEW |NEEDINFO Info Provider| |ajorgensen@novell.com --- Comment #1 from Mark Gordon 2007-11-08 09:30:09 MST --- What line(s) do you have in /etc/sudoers to enable this? I've gotten it to work with the following line in /etc/sudoers: mtgordon ALL = NOPASSWD: /usr/bin/gnomesu /sbin/YaST2 This requires keeping the DISPLAY environment variable, and for some reason it's giving me the Qt interface, but it's functional. If you're willing to run the ncurses version of YaST, the gnomesu part is optional. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=339925#c3 Mark Gordon changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|Normal |Enhancement Summary|yast startup from a normal user requires root |can't make sudo require nonroot user's password |password regardless of sudo requirement | --- Comment #3 from Mark Gordon 2007-11-08 13:55:07 MST --- Ah, now I understand. You have a line like the following? Defaults targetpw

From sudoers(5):

targetpw If set, sudo will prompt for the password of the user spec‐ ified by the -u flag (defaults to root) instead of the password of the invoking user. Note that this precludes the use of a uid not listed in the passwd database as an argument to the -u flag. This flag is off by default. If I comment that line out (using visudo), I'm prompted for my own password rather than the root password. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=339925#c5 Andrew Jorgensen changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|ajorgensen@novell.com | --- Comment #5 from Andrew Jorgensen 2007-11-08 15:15:03 MST --- Sorry, didn't know about this checkbox to remove the needinfo status. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

From a user perspective the bug is that when I have sudo configured as described I can run administrative commands from a command line using sudo and am prompted only for my own password. If, however, I click on the YaST icon in

https://bugzilla.novell.com/show_bug.cgi?id=339925#c7 Andrew Jorgensen changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|ajorgensen@novell.com | --- Comment #7 from Andrew Jorgensen 2007-11-08 17:13:14 MST --- The change you suggest doesn't appear to change anything at all for me. But more importantly I must still not be communicating this very well. sudo works fine. There are no problems with sudo. My sudo configuration is as I like it (as described above) and works perfectly with sudo. The bug is that gnomesu and kdesu cannot be configured to prompt for the user's own password (as sudo can) but require the root password regardless of the configuration in /etc/sudoers. the slab I am prompted for the root password. The ideal situation would be if gnomesu / kdesu used sudo and /etc/sudoers so that the system administrator can control what users have what access GUI or CLI from one place and does not need to give the root password to users who are not comfortable with CLI and need to use YaST. I hope that make this more clear. Thanks! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=339925#c9 Andrew Jorgensen changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|ajorgensen@novell.com | --- Comment #9 from Andrew Jorgensen 2007-11-09 13:25:16 MST --- I think you've got it exactly now, except that I'd rather put emphasis on the idea of having a single place for a sysadmin to control this stuff (sudoers) also work for the GUI. There is a decent tool for this called GKsu http://www.nongnu.org/gksu/ (at least for gnome) and there's probably one for kde as well. For this to work completely xdg-su would have to check for gksu's existance and use it if available. Or like you suggest gnomesu and kdesu might be modified. Thanks! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=339925#c11 Carlos Lange changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |carlos.lange@ualberta.ca --- Comment #11 from Carlos Lange 2007-11-25 11:54:36 MST --- If I may chime in, hoping it helps. The behaviour you are seeking is exactly what kdesu does. As I reported in Bug 340311, kdesu uses sudo and it will accept only the user's password for authentication, if you use: Defaults:%wheel authenticate %wheel machine = PASSWD: ALL My issue there is that the pop-up does not mention correctly which password is required. Maybe your bug here applies to gnomesu only (which I don't use). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=339925 User ajorgensen@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=339925#c13 Andrew Jorgensen changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|ajorgensen@novell.com | Summary|can't make gnomesu / kdesu require non-root |can't make gnomesu require non-root user's |user's password |password --- Comment #13 from Andrew Jorgensen 2008-06-12 09:18:24 MDT --- Of course it's still an issue. Please don't use needinfo for things that can be easily verified yourself. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=339925 User ajorgensen@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=339925#c15 --- Comment #15 from Andrew Jorgensen 2008-06-12 12:07:22 MDT --- Regarding inactivity I suppose you're right. And you did get the info you wanted. I still say it's impolite to not try to verify the bug before presuming it might be fixed. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=339925 User casualprogrammer@gmail.com added comment https://bugzilla.novell.com/show_bug.cgi?id=339925#c16 Casual J. Programmer changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |NORESPONSE --- Comment #16 from Casual J. Programmer 2009-01-14 10:47:23 MST --- OK, after another 6 month of inactivity closing as noresponse. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=339925 User casualprogrammer@gmail.com added comment https://bugzilla.novell.com/show_bug.cgi?id=339925#c18 --- Comment #18 from Casual J. Programmer 2009-01-14 11:44:33 MST --- OK Andrew, I gather you fix it then ? Or are you just keeping it open ? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=339925 User casualprogrammer@gmail.com added comment https://bugzilla.novell.com/show_bug.cgi?id=339925#c20 --- Comment #20 from Casual J. Programmer 2009-01-14 12:17:36 MST --- Sorry mate, good luck with getting it solved ;-) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.