Best way to log sudo group

Question

What is the best way to give root privileges and also log their activity logs. What I did was I have created a user added to group assigned admin rights to the group using entry:-

%group_name ALL = ALL ALL

It works but first time it asks password and it also logs that and after that it dose'nt ask for password and works without giving sudo command

In the next scenario it asks for sudo before any command and logs it without sudo asking for password

I need to work it like it asks for password first time with sudo and then dont need sudo to be added before a command and also logs it.

we use mostly Fedora 15 and CentOS 6.0 up versions on servers.

Answer 1

Have it as

User_Alias ADMIN = * 
ADMIN ALL=(ALL) ALL

After that, you need your password, UNLESS you sudo again in a short time, like within a minute or two. And all such commands issued should be in /var/log/secure.

And I hope you've updated to CentOS 6.4 from 6.0....