All of a sudden we have been getting the following email/alerts, the hostname changes but the main content does not…
bebucsmailsvrp1.ucs.bebconsultingservices.com : May 19 10:00:41 : Bbonnell : user NOT in sudoers ; TTY=pts/0 ; PWD=/home/Bbonnell ; USER=root ; COMMAND=/sbin/parted -l
The UCS logs are not helping give any details…
Suggestions?
Are you concerned that you suddenly get these emails or that sudo is not working?
Both actually, not sure if this is an issue or not since the logs are lacking in details.
You (or someone using your account “Bbonnel”) tried to use a “sudo parted -l” on bebucsmailsvrp1. This might be caused by a graphical tool as well but I dont know about candidates.
If you want to enable sudo I’d recommend to install the package “univention-sudo”, This would enable members of the Domain Admin Group to run commands through sudo.