Suddenly getting these alerts?

sudo

#1

All of a sudden we have been getting the following email/alerts, the hostname changes but the main content does not…

bebucsmailsvrp1.ucs.bebconsultingservices.com : May 19 10:00:41 : Bbonnell : user NOT in sudoers ; TTY=pts/0 ; PWD=/home/Bbonnell ; USER=root ; COMMAND=/sbin/parted -l

The UCS logs are not helping give any details…

Suggestions?


#2

Are you concerned that you suddenly get these emails or that sudo is not working?


#3

Both actually, not sure if this is an issue or not since the logs are lacking in details.


#4

You (or someone using your account “Bbonnel”) tried to use a “sudo parted -l” on bebucsmailsvrp1. This might be caused by a graphical tool as well but I dont know about candidates.
If you want to enable sudo I’d recommend to install the package “univention-sudo”, This would enable members of the Domain Admin Group to run commands through sudo.