No, I mean it affected every use of sudo. However, adding the !tty_tickets
option solved the behaviour.

I then realised it could be to do with my shell (I use fish normally). With
tty_tickets back on:

Welcome to fish, the friendly interactive shell
Type help for instructions on how to use fish
dha...@swisstph-dhardy ~> bash
bash:dhardy ~(master)$ sudo visudo # here I turned tty_tickets on
bash:dhardy ~(master)$ sudo echo 2
[sudo] password for dhardy:
2
bash:dhardy ~(master)$ sudo echo 2
2
bash:dhardy ~(master)$ sudo echo 2
2
bash:dhardy ~(master)$ fish
Welcome to fish, the friendly interactive shell
Type help for instructions on how to use fish
dha...@swisstph-dhardy ~> sudo echo 3
[sudo] password for dhardy:
3
dha...@swisstph-dhardy ~> sudo echo 3
[sudo] password for dhardy:
3
dha...@swisstph-dhardy ~>

So yes, with bash tty_tickets works fine, but with fish, it somehow thinks
the commands come from separate sessions.

For me, then, turning tty_tickets off is a good enough solution. I'll try to
add a note into the fish users wiki.

Thanks,
Diggory

On 1 October 2010 02:59, Jan Braun <janbr...@gmx.de> wrote:

> Hi,
>
> Diggory Hardy schrob:
> > The sudo man-page states: Once a user has been authenticated, a time
> stamp is
> > updated and the user may then use sudo without a password for a short
> period of
> > time (15 minutes unless overridden in sudoers).
> >
> > Since a few weeks this hasn't been happening on my system: every time I
> use
> > sudo it requires authentication.
>
> If that happens only if you switch terminals between sudo invocations,
> it's this:
>
> | What's new in Sudo 1.7.4?
> | * The tty_tickets sudoers option is now enabled by default.
>
> You might try
>
> | Defaults !tty_tickets
>
> in your sudoers file and see if that fixes it for you.
>
> HTH,
>    Jan
> --
> ()  ascii ribbon campaign - against html e-mail
> /\  www.asciiribbon.org   - against proprietary attachments
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (GNU/Linux)
>
> iEYEARECAAYFAkylMoMACgkQVqitCWBS97tDXwCdFQlHetoWO7NVshux9OuPEJYS
> wmoAn2Cx1rkijPibG5iv+EFTFgb7kEAB
> =uv+A
> -----END PGP SIGNATURE-----
>
>

Reply via email to