Okay, so I have <user> added to group sudo in /etc/group.<div><div>tape:x:26:</div><div>sudo:x:27:bmike1</div><div>audio:x:29:pulse</div><div><br></div><div><div>I have the lines:</div><div><br></div><div># Allow members of group sudo to execute any command</div>
<div>#sudo ALL=(ALL:ALL) ALL</div><div>%sudo ALL=(ALL) NOPASSWD: ALL</div><div><br></div><div>in /etc/sudoers and as a result sudo no longer requires a password for my user. I then figured I would test this so I commented out my user in /etc/group (sudo:x:27:#<user>) and then opened a new terminal and typed in 'sudo visudo' fully expecting it to ask for a password but no password was requested. So what's up?</div>
<div>:-)~MIKE~(-:</div>
<br><br><div class="gmail_quote">On Fri, Jul 5, 2013 at 11:08 PM, James Dugger <span dir="ltr"><<a href="mailto:james.dugger@gmail.com" target="_blank">james.dugger@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><div class="gmail_default" style="font-size:small;display:inline">Either create a new group or use an exiting group that is not being used. and then add the group to the sido script. so for a new group:</div>
<div><div class="gmail_default" style="font-size:small;display:inline"><br></div></div><div><div class="gmail_default" style="font-size:small;display:inline">1. Add a new group to /etc/group with the following command:</div>
</div><div><div class="gmail_default" style="font-size:small;display:inline"><br></div></div><div><div class="gmail_default" style="display:inline"> groupadd groupname (where groupname is a single word)</div></div><div>
<div class="gmail_default" style="font-size:small;display:inline"><br></div></div><div><div class="gmail_default" style="font-size:small;display:inline">2. Open the /etc/group file and add your username to your new group as discussed before.</div>
</div><div><div class="gmail_default" style="font-size:small;display:inline"><br></div></div><div><div class="gmail_default" style="font-size:small;display:inline">3. Open the sudo script file with visudo and add the groupname following stanza to the file:</div>
</div><div><div class="gmail_default" style="font-size:small;display:inline"><br></div></div><div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(11,83,148)">%groupname ALL=(ALL) NOPASSWD: ALL </div>
<div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(11,83,148)"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(11,83,148)">
This is basically the same thing. If you are the only user or admin on your system than this is overkill and you could just use the %sudo group stanza as discussed before. However if you are planning or have serveral administrators that will have different permissions than it would be best to re-think not using passwords. </div>
<div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(11,83,148)"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(11,83,148)">
<br></div></div><div><br></div></div></blockquote></div></div></div>