expert install user not a sudoer if root password given

Bug #40684 reported by stestagg
50
This bug affects 3 people
Affects Status Importance Assigned to Milestone
user-setup (Ubuntu)
Confirmed
Medium
Unassigned

Bug Description

So I installed 6.06 beta in windows XP SP2(Athlon 2400, 512mb ram, 8GB virtual SCSI Drive) using VMWare server E.X.P using the i386 ISO (not the live-cd one). I chose expert mode and everything went smoothly until I was told to login using the OEM user and execute: sudo oem-config-prepare, but the oem user wasn't in /etc/sudoers. It would make sense to add a group to /etc/sudoers of which, oem was a member, this would make installation more logical.

Stephen.

Revision history for this message
Alex (alexcastan) wrote :

It happens the same to me.

Dapper 6.06 beta2 i386 expert install is not working (well, sudo is not working).

I do an expert install on a PC. at installation time I give root password 'aaa', and create normal user account named 'acastan' with password 'bbb'.

/etc/sudoers and /etc/group files are misconfigured.

not "%admin " line in /etc/sudoers
not "admin" group in /etc/groups

this is the /etc/sudoers in the expert installation (see no "%admin" line at the end of the file):

-------------------

# /etc/sudoers
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the man page for details on how to write a sudoers file.
# Host alias specification

# User alias specification

# Cmnd alias specification

# Defaults

Defaults !lecture,tty_tickets,!fqdn

# User privilege specification
root ALL=(ALL) ALL

-------------------

root:x:0:
daemon:x:1:
bin:x:2:
sys:x:3:
adm:x:4:acastan
tty:x:5:
disk:x:6:
lp:x:7:cupsys
mail:x:8:
news:x:9:
uucp:x:10:
man:x:12:
proxy:x:13:
kmem:x:15:
dialout:x:20:cupsys,acastan
fax:x:21:
voice:x:22:
cdrom:x:24:haldaemon,acastan
floppy:x:25:haldaemon,acastan
tape:x:26:
sudo:x:27:
audio:x:29:acastan
dip:x:30:acastan
www-data:x:33:
backup:x:34:
operator:x:37:
list:x:38:
irc:x:39:
src:x:40:
gnats:x:41:
shadow:x:42:
utmp:x:43:
video:x:44:acastan
sasl:x:45:
plugdev:x:46:haldaemon,acastan
staff:x:50:
games:x:60:
users:x:100:
nogroup:x:65534:
dhcp:x:101:
syslog:x:102:
klog:x:103:
crontab:x:104:
ssh:x:105:
lpadmin:x:106:acastan
messagebus:x:107:
haldaemon:x:108:
slocate:x:109:
scanner:x:110:cupsys,acastan
gdm:x:111:
acastan:x:1000:

Revision history for this message
Pete Savage (petesavage) wrote :

This has been brought up as a bug several times but has been listed as the intentional actions for the package

Changed in user-setup:
status: Unconfirmed → Rejected
Revision history for this message
stestagg (stestagg) wrote :

It means that the install is broken.
During install, instructions are given onscreen of actions that should be carried out during the OEM configuration phase. These actions don't work if followed because of this 'intentional' feature of the package.
So either there is a bug in the sudo package OR a mistake in the install instructions.

I don't see why the OEM user can't be added to the sudoers list and then removed by oem-config-prepare. There isn't a security issue and it can't be hard to write a script to remove them from the sudoers file.

Revision history for this message
Colin Watson (cjwatson) wrote :

Pete should not have closed this bug.

Changed in user-setup:
status: Rejected → Confirmed
Revision history for this message
Pete Savage (petesavage) wrote :

Apologies

Revision history for this message
Chris Moore (dooglus) wrote :

/var/lib/dpkg/info/passwd.config includes these lines:

    if ! root_password; then
     sudoers_admin_group
     addgroup --system admin >/dev/null 2>&1 || true
     adduser "$USER" admin >/dev/null 2>&1 || true
    fi

basically, if you've set a root password, then it won't make the 'admin' group, or allow the admin group to use sudo to become root.

This in turn makes the GNOME menu entries for 'synaptic' and other admin programs not work, since they use 'gksudo'.

Do you have references for the other bugs where this has been brought up? This bug should be marked as a duplicate of them.

Revision history for this message
Colin Watson (cjwatson) wrote :

/var/lib/dpkg/info/passwd.config is no longer used in Dapper; the corresponding code is in user-setup.

Please do not mark this bug as a duplicate of any other bug; it is already a duplicate of bug 16139.

Revision history for this message
Colin Watson (cjwatson) wrote :

Oh, sigh, you actually just marked this bug as a duplicate of bug 16139. I'd prefer it to stay separate, as it's now a clean bug documenting just the issue that the expert user isn't a sudoer if the root password is given, rather than a grab-bag of other partially-fixed issues.

Revision history for this message
Alex Mauer (hawke) wrote :

This bug also occurs if you don't actually create an initial user during the expert install -- the admin group is not created, and not given sudo access.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.