search for: requiretty

Displaying 18 results from an estimated 18 matches for "requiretty".

2012 Jan 25
3
Having problems with sudoers
...ctives changes is different, but it's saying that "sudo: sorry, you must have a tty to run sudo". I'm trying to enable the user "apache" to have the ability to run an executable from a web page. One of the common solutions is to do the following: Defaults:apache !requiretty apache ALL = NOPASSWD:/program.name also tried: Defaults !requiretty Defaults visiblepw Anyone have a suggestion? I've got to research the tty stuff for now to ensure there is one available, but beyond that, I'm stumped. Thanks for any help. steve campbell
2009 Oct 15
1
CentOS Digest, Vol 57, Issue 14
Thanks for the responses. I think this is what I want to do. I commented out #Defaults requiretty in /etc/sudo. But what I really wanted to do was just place it in VPNUSERS: %vpnusers ALL=NOPASSWD: /sbin/service myciscovpn start, \ /sbin/service myciscovpn stop, \ /sbin/service myciscovpn status, \ /usr/bin/mycisco, /usr/local/bin/...
2015 Feb 12
7
Cronjob and sudo
...-u matt find /var/list -mmin +360 -empty -user matt -exec rm {} \; I want to run it as matt rather than root for just an added bit of safety. Problem is I get this. "sudo: sorry, you must have a tty to run sudo" Is there another way to do this? As I understand the reason for this is requiretty in sudo config. If that improves security I would rather not change that setting.
2011 Oct 19
0
EC2 bootstrap: chicken and egg problem with login as ec2-user and sudoers "requiretty"
...amazon-linux-ami ) and they require login as ec2-user. The problem is that if i run puppet node bootstrap --login ec2-user, it will detect it and run my install script as with sudo, which is fine, but sudo will not run it because it is configured by default to disallow sudo commands without a tty ( requiretty in /etc/sudoers ). And i can not change the sudoers within my script, since it could not be executed ! Does anyone else is bootstrapping Amazon AMIs with login as ec2-user ? How do you do ? -- You received this message because you are subscribed to the Google Groups "Puppet Users" grou...
2015 Oct 31
3
use pssh to restart a service
...Received disconnect from 47.18.111.100: 11: disconnected by user Oct 31 19:15:21 logs sshd[24407]: pam_unix(sshd:session): session closed for user bluethundr No change in the logs after making the suggested change to disable tty: [root at logs:~] #cat /etc/sudoers.d/bluethundr Defaults:myuser !requiretty, visiblepw Got the same exact message! Anything else I can try? Thanks On Sat, Oct 31, 2015 at 5:34 PM, Gordon Messmer <gordon.messmer at gmail.com> wrote: > On 10/31/2015 02:04 PM, Tim Dunphy wrote: > >> pssh -h es_list "/bin/sudo -S /bin/systemctl restart elasticsear...
2015 Oct 31
4
use pssh to restart a service
Hi all, I need to restart a service on a few elasticsearch nodes. I'm trying to do it with pssh. I'm getting this error when I try to do that: pssh -h es_list "/bin/sudo -S /bin/systemctl restart elasticsearch" [1] 17:01:50 [FAILURE] bluethundr at es2.example.com Exited with error code 1 [2] 17:01:51 [FAILURE] bluethundr at es3.example.com Exited with error code 1 [3]
2009 Dec 13
4
v3.0.4 and OSXS - Exit code: 1
Hello, I used Lingon for Leopard Server to create a launchd job that would execute the following rsync (v3.0.4) command when logged in as admin at 12:01 AM each day. sudo rsync -aAHvWX /Volumes/File_Storage/docs/ /Volumes/File_Storage_Mirror/docs When launchd executed this command, it did not work. The system.log file reads "Exited with exit code: 1". It called it at 12:01 AM,
2010 Mar 03
7
SSH Remote Execution - su?
Greetings All- I'm about to embark on some remote management testing and need a way to login to a remote system running CentOS 4.x/5.x via SSH, su to root (using a password), then execute a command. I currently login to the boxes using key based SSH like this: ssh -i ~/remote_key admin@$REMOTEIP Then, I SU to root. However, if I try to do this automatically like this: ssh -i ~/remote_key
2008 Apr 24
2
help...i cant do more...
Hi... Im problem is this, i have a asterisk server (FC8 - kernel 2.6.24) a the asterisk version is 1.4.18. If in the machine is all ok, i can stop start the asterisk service no prob, my problem is when in another server (in my case, debian etch 4) using the ssh the stop service is ok, but the start service dosend finalise. Like this: ssh etx9 'sudo /etc/init.d/asterisk stop' operacao at
2013 Oct 14
2
setuid or other ideas
Everyone, I am working on a Centos 5.9 system. I have an need to be able to activate a piece of software from /etc/smrsh that is activated when sendmail delivers the e-mail to this piece of software. I would like this piece of software to take on the user and group identities that are different than 'mail' which is what happens now. I want to use a user and group that is not root), so
2015 Feb 12
0
Cronjob and sudo
...mpty -user matt -exec rm {} \; > > I want to run it as matt rather than root for just an added bit of > safety. Problem is I get this. > > "sudo: sorry, you must have a tty to run sudo" > > Is there another way to do this? As I understand the reason for this > is requiretty in sudo config. If that improves security I would > rather not change that setting. Did you try to use su instead? E.g., in my /etc/rc.local I have a bunch of stuff run on behalf of users other than root. Like: /bin/su lmgrd -c 'export IDL_DIR=/usr/local/opt/flexlm/idl;/usr/local/opt/flex...
2015 Feb 12
0
Cronjob and sudo
On Thu, Feb 12, 2015 at 12:32:12PM -0600, Matt wrote: > I need to remove empty files out of a directory that are over 6 hours > old so I created this script and put it in cron.hourly. For what it's worth, we no longer have requiretty in the package in Fedora, so eventually that change will probably make it down to CentOS. Overall, security benefit vanishingly small and inconvenience high. I do think that the suggestion of using /etc/cron.d and cron's own user feature is better in this case, though. -- Matthew Miller <...
2015 Oct 31
0
use pssh to restart a service
...Dunphy wrote: > pssh -h es_list "/bin/sudo -S /bin/systemctl restart elasticsearch" The default configuration prohibits use if input echo can't be disabled. That means no "-S". I modify that for users where necessary: /etc/sudoers.d/myuser: Defaults:myuser !requiretty, visiblepw
2015 Nov 02
0
use pssh to restart a service
...gument to pssh to get more information. # cat /etc/sudoers.d/gordon gordon ALL=(ALL) NOPASSWD: ALL $ pssh -h t -i sudo echo true [1] 16:02:12 [FAILURE] MYHOST Exited with error code 1 Stderr: sudo: sorry, you must have a tty to run sudo # cat /etc/sudoers.d/gordon Defaults:gordon !requiretty, visiblepw gordon ALL=(ALL) NOPASSWD: ALL $ pssh -h t -i sudo echo true [1] 16:02:30 [SUCCESS] MYHOST true
2009 Oct 12
2
scp with tty
Hello I need to know a way to have scp allocate a tty on a remote machine so I can have it run sudo and activate a vpn which it will need to activate. scp with "-S" does not work. I can't chmod +s the cisco vpn client because when I try to run it it says it can not have setuser. I could have the user scp via root but I do not want to do that. Any way to have scp allocate a tty?
2015 Nov 02
2
use pssh to restart a service
.../etc/sudoers.d/gordon > gordon ALL=(ALL) NOPASSWD: ALL > > $ pssh -h t -i sudo echo true > [1] 16:02:12 [FAILURE] MYHOST Exited with error code 1 > Stderr: sudo: sorry, you must have a tty to run sudo > > > > # cat /etc/sudoers.d/gordon > Defaults:gordon !requiretty, visiblepw > gordon ALL=(ALL) NOPASSWD: ALL > > $ pssh -h t -i sudo echo true > [1] 16:02:30 [SUCCESS] MYHOST > true > > > > _______________________________________________ > CentOS mailing list > CentOS at centos.org > https://lists.centos.org/mailman/list...
2013 Sep 23
1
Howto: Extremely tight security rsync shell for backups
...d. (change the shell at the end of the line) ------------------------------------- backupaccount:x:514:514::/home/backupaccount:/usr/local/bin/backupaccount.sh # ON WEBSERVER in /etc/sudoers ------------------------------------- backupaccount ALL=NOPASSWD: /usr/bin/rsync Defaults:backupaccount !requiretty ------------------------------------- # ON WEBSERVER And in /usr/local/bin/backupaccount.sh ------------------------------------- #! /bin/sh # look in this file to see what options were passed, if the rsync doesn't work. echo $* > /home/backupaccount/options.passed.sh # rsync -va backupac...
2010 Feb 27
24
Call for testing: OpenSSH-5.4
Hi, OpenSSH 5.4 is almost ready for release, so we would appreciate testing on as many platforms and systems as possible. This is a big release, with a number of major new features and many bug fixes. Snapshot releases for portable OpenSSH are available from http://www.mindrot.org/openssh_snap/ The OpenBSD version is available in CVS HEAD: http://www.openbsd.org/anoncvs.html Portable OpenSSH