Comment 37 for bug 43233

Revision history for this message
Richard (rd1) wrote :

This is a usability issue for beginners (it's been logged a few times in the Absolute Beginners) and even experts can have trouble working around it.

Since sudo's use of a timestamp is an optimization to avoid having to re-enter the password a lot, can I suggest the following, also mentioned twice above:

- if the timestamp is too far in future, simply ask for the password rather than emitting this error message

This would completely solve this issue, and in my view would not introduce any security risks. This fix is better than fixing the -k or -K options - much simpler to implement and *much easier* for a beginner or expert to still get logged in.

We should still try to fix sudo -k/K of course, so that automated scripts can run, but I think the primary fix should be to enable an interactive user to get logged in.