<html><head><style type="text/css"></style></head><body><div style="font-family:arial,helvetica,sans-serif;font-size:10pt"><div style="font-family: arial,helvetica,sans-serif; font-size: 10pt;"> <div style="font-family: arial,helvetica,sans-serif; font-size: 13px;"> On Tue, Nov 16, 2010 at 5:28 PM, Arnaud G <<a ymailto="mailto:lepelerin2002@yahoo.com" href="mailto:lepelerin2002@yahoo.com">lepelerin2002@yahoo.com</a>> wrote: > Hi, > > Here is what I would like to do in my environment > > env: all machines running Ubuntu 10.04 LTS. > all machines running openssh-server and openssh-client > > User "A" on machine "a" and user "B" on machine "b", user "C" on machine "c" > and so forth ... > > First I want to be able to ssh to "b" from "a" without the remote ("B") user > password. So login as "B" on "b" from "a" with "A". > I was successful setting that up following these instructions: > > <a target="_blank" href="http://linuxproblem.org/art_9.html">http://linuxproblem.org/art_9.html</a> > > Now what I want to do is to use sudo on "b" as "B" with "A" 's password or > no password. I would prefer to use my ssh key for that. > > Setting up the sudoers file with the NOPASSWD option is not an option. I > want user "B" to keep her sudo password. > > I have been trying many things I could find on the web, but to no > availability. > Every time I try to sudo on "b", it asks for "B" 's password. > > Any chance that it can be done. If yes could you point me in the right > direction. > > But first is it the best way to do it. > Thank you in advance for sharing your knowledge. > > A > > From: Chris MacDonald <chris@fourthandvine.com> To: "Ubuntu user technical support, not for general discussions" <ubuntu-users@lists.ubuntu.com> Sent: Tue, November 16, 2010 9:40:25 PM Subject: Re: ssh and sudo >Someone here might be able to describe a setup wherein this would work >solely with ssh and sudo being used, but have you considered nis? >Centralizing authentication would make parts of what you're wanting to >do a lot easier. > >Chris > Tx Chris, but what do you mean exactly by centralized authentication? The situation here is that I maintaining my converted friends machines (6 at the moment but soon a couple more). I made them switch from Vista to Ubuntu. the deal we agreed upon is "OK we go with Ubuntu but you maintain the machine". Having machine being located remotely how can I have centralized authentication. I am ready to try a better solution than mine. I am open to any suggestion that would make my life easier. A </div> </div> </div> </body></html>