On a certain RHEL5 machine, when root is executing commands such as
passwd someuser or any other privileged command, the root password is requested for verification and the command can't be executed without it.
# id uid=0(root) gid=0(root) groups=0(root),10(wheel) # passwd someuser Password:(need to enter root verification password to proceed) New user password: Retype new password:
root user is present in the
/etc/sudoersfile as shown below:
root ALL=(ALL) ALL
All basic files in
sudo-lare the same as those on another machine that doesn't behave in the same way.
SElinux is disabled.
/etc/nsswitch.confis unchanged and consistent with other machines.
passwd: files ldap group: files ldap shadow: files ldap hosts: files dns networks: files protocols: files services: files ethers: files rpc: files netgroup: files sudoers: files ldap
Not much information can be seen from logs files as listed below when executing passwd command:
/etc/log/secure- empty (Unfortunately I'm not allowed to touch rsyslog)
sshd[xxxxx]: Accepted keyboard-interactive/pam for root from 127.0.0.XX port XXXXX ssh2 sshd[xxxxx]: pam_unix(sshd:session): session opened for user root by (uid=0)
The same thing happens when connected directly (without ssh) to the console.
Has anyone experienced similar behavior?
Or can you please recommend any debugging flag or a method that can help in finding the cause of the problem?