Bug 846

Summary: timeouts are unrealistic even when specified
Product: Sudo Reporter: Steve L <stevena.lewis>
Component: SudoAssignee: Todd C. Miller <Todd.Miller>
Status: RESOLVED FIXED    
Severity: normal    
Priority: normal    
Version: 1.8.24   
Hardware: Sun   
OS: Solaris 2.x   

Description Steve L 2018-08-21 16:41:36 MDT
Even when timeout and password-timeout are specified:

bseadm19 # sudo -V
Sudo version 1.8.24
Configure options: --with-insults=disabled --with-logging=syslog --with-logfac=auth --with-editor=/usr/bin/vim:/usr/bin/vi:/bin/vi --with-env-editor --prefix=/opt/GEapps --enable-noargs-shell --with-pam --with-project --with-logging=file --with-logpath=/var/adm/sudo --without-mail-if-no-user --without-sendmail --with-ldap --disable-pie --with-libpath=/opt/GEapps/lib --with-password-timeout=5 --with-timeout=5 --with-project --disable-tmpfiles.d
Sudoers policy plugin version 1.8.24
Sudoers file grammar version 46

Sudoers path: /etc/sudoers
nsswitch path: /etc/nsswitch.conf
ldap.conf path: /etc/ldap.conf
ldap.secret path: /etc/ldap.secret
Authentication methods: 'pam'
Lecture user the first time they run sudo
Require users to authenticate by default
Root may run sudo
If sudo is invoked with no arguments, start a shell
Allow some information gathering to give useful error messages
Visudo will honor the EDITOR environment variable
Set the LOGNAME and USER environment variables
Length at which to wrap log file lines (0 for no wrap): 80
Authentication timestamp timeout: 18000.0 minutes
Password prompt timeout: 18000.0 minutes
Comment 1 Todd C. Miller 2018-08-21 17:41:17 MDT
The actual timeout is correct, it was just being displayed incorrectly.  This is fixed by https://www.sudo.ws/repos/sudo/rev/8775c17229a4
Comment 2 Todd C. Miller 2018-09-05 06:28:14 MDT
Fixed in sudo 1.8.25