#41 SUDOWIN don't work on my Servers !

[DANY NORMANDEAU]

Hi all,

I try to use "sudowin-0.4.2-r208" and I can't get it work ...

I see some things too in config files :

- the "sudowin.client.gui.exe.config" file has a "PortName="Sudo"" instead of "PortName="Sudowin"" if I compare to the page 16 of the folowing document : http://www.sans.org/reading_room/whitepapers/bestprac/1726.php

- the "sudoers.xml" file have "Administrators" as "privilegesGroup", I had to change that for Windows other than english, but it’s OK

- the "sudowin.server.exe.config" file have "authorizedGroup="Users"" by default in "Remote Settings" section. I think it must be "authorizedGroup="Sudoers"" if I compare to the page 16 of the folowing document : http://www.sans.org/reading_room/whitepapers/bestprac/1726.php

- the "sudoers.xml" file "userGroup name ="Sudoers"" by default but I see "userGroup name ="standard"" on the page 16 of the folowing document : http://www.sans.org/reading_room/whitepapers/bestprac/1726.php

- the file "Service.log" isn't created at all

- my "applicative event log" show me "success audit" about Sudowin, but nothing appear on the screen

I try to get it work on Windows XP Pro SP2 and on Windows Server 2003 SP2. Same result on either of Windows I try it... But on Windows Server 2003, I always receive "Invalid Logon Attempt" each time I try to escalate my privileges, but my password is ok. I did this as describe on page 46 of the folowing document : http://www.sans.org/reading_room/whitepapers/bestprac/1726.php :

- I put the user in "Sudoers" local group

- I created an entry in "Sudoers.xml" file for this user

I can get it "work" if I escalate my rights from my admin account (success audit)

I try with local user account and with a domain user account ...

What are the corrects parameters to use in order to make it work well ?

Anyone can help me ?

Thank you.

Dany Normandeau

P.S.: please ignore these opened requests : 2277851 & 2277857

[Morty]

Are your Secondary Logon (seclogon) and Terminal services (termservice) services enabled?

[DANY NORMANDEAU]

Secondary Logon and Terminal service services are enabled.