Displaying 18 results from an estimated 18 matches for "requiretty".
2012 Jan 25
3
Having problems with sudoers
...ctives changes is
different, but it's saying that "sudo: sorry, you must have a tty to
run sudo".
I'm trying to enable the user "apache" to have the ability to run an
executable from a web page. One of the common solutions is to do the
following:
Defaults:apache !requiretty
apache ALL = NOPASSWD:/program.name
also tried:
Defaults !requiretty
Defaults visiblepw
Anyone have a suggestion? I've got to research the tty stuff for now to
ensure there is one available, but beyond that, I'm stumped.
Thanks for any help.
steve campbell
2009 Oct 15
1
CentOS Digest, Vol 57, Issue 14
Thanks for the responses. I think this is what I want to do. I commented out
#Defaults requiretty
in /etc/sudo. But what I really wanted to do was just place it in VPNUSERS:
%vpnusers ALL=NOPASSWD: /sbin/service myciscovpn start, \
/sbin/service myciscovpn stop, \
/sbin/service myciscovpn status, \
/usr/bin/mycisco, /usr/local/bin/...
2015 Feb 12
7
Cronjob and sudo
...-u matt find /var/list -mmin +360 -empty -user matt -exec rm {} \;
I want to run it as matt rather than root for just an added bit of
safety. Problem is I get this.
"sudo: sorry, you must have a tty to run sudo"
Is there another way to do this? As I understand the reason for this
is requiretty in sudo config. If that improves security I would
rather not change that setting.
2011 Oct 19
0
EC2 bootstrap: chicken and egg problem with login as ec2-user and sudoers "requiretty"
...amazon-linux-ami
) and they require login as ec2-user.
The problem is that if i run puppet node bootstrap --login ec2-user,
it will detect it and run my install script as with sudo, which is
fine, but sudo will not run it because it is configured by default to
disallow sudo commands without a tty ( requiretty in /etc/sudoers ).
And i can not change the sudoers within my script, since it could not
be executed !
Does anyone else is bootstrapping Amazon AMIs with login as ec2-user ?
How do you do ?
--
You received this message because you are subscribed to the Google Groups "Puppet Users" grou...
2015 Oct 31
3
use pssh to restart a service
...Received disconnect from 47.18.111.100:
11: disconnected by user
Oct 31 19:15:21 logs sshd[24407]: pam_unix(sshd:session): session closed
for user bluethundr
No change in the logs after making the suggested change to disable tty:
[root at logs:~] #cat /etc/sudoers.d/bluethundr
Defaults:myuser !requiretty, visiblepw
Got the same exact message!
Anything else I can try?
Thanks
On Sat, Oct 31, 2015 at 5:34 PM, Gordon Messmer <gordon.messmer at gmail.com>
wrote:
> On 10/31/2015 02:04 PM, Tim Dunphy wrote:
>
>> pssh -h es_list "/bin/sudo -S /bin/systemctl restart elasticsear...
2015 Oct 31
4
use pssh to restart a service
Hi all,
I need to restart a service on a few elasticsearch nodes. I'm trying to do
it with pssh.
I'm getting this error when I try to do that:
pssh -h es_list "/bin/sudo -S /bin/systemctl restart elasticsearch"
[1] 17:01:50 [FAILURE] bluethundr at es2.example.com Exited with error code 1
[2] 17:01:51 [FAILURE] bluethundr at es3.example.com Exited with error code 1
[3]
2009 Dec 13
4
v3.0.4 and OSXS - Exit code: 1
Hello,
I used Lingon for Leopard Server to create a launchd job that would
execute the following rsync (v3.0.4) command when logged in as admin at
12:01 AM each day.
sudo rsync -aAHvWX /Volumes/File_Storage/docs/
/Volumes/File_Storage_Mirror/docs
When launchd executed this command, it did not work. The system.log
file reads "Exited with exit code: 1". It called it at 12:01 AM,
2010 Mar 03
7
SSH Remote Execution - su?
Greetings All-
I'm about to embark on some remote management testing and need a way to login to a remote system running CentOS 4.x/5.x via SSH, su to root (using a password), then execute a command.
I currently login to the boxes using key based SSH like this:
ssh -i ~/remote_key admin@$REMOTEIP
Then, I SU to root. However, if I try to do this automatically like this:
ssh -i ~/remote_key
2008 Apr 24
2
help...i cant do more...
Hi...
Im problem is this, i have a asterisk server (FC8 - kernel 2.6.24) a the
asterisk version is 1.4.18.
If in the machine is all ok, i can stop start the asterisk service no prob,
my problem is when in another server (in my case, debian etch 4) using the
ssh the stop service is ok, but the start service dosend finalise.
Like this:
ssh etx9 'sudo /etc/init.d/asterisk stop'
operacao at
2013 Oct 14
2
setuid or other ideas
Everyone,
I am working on a Centos 5.9 system. I have an need to be able to
activate a piece of software from /etc/smrsh that is activated when
sendmail delivers the e-mail to this piece of software. I would like
this piece of software to take on the user and group identities that are
different than 'mail' which is what happens now. I want to use a user
and group that is not root), so
2015 Feb 12
0
Cronjob and sudo
...mpty -user matt -exec rm {} \;
>
> I want to run it as matt rather than root for just an added bit of
> safety. Problem is I get this.
>
> "sudo: sorry, you must have a tty to run sudo"
>
> Is there another way to do this? As I understand the reason for this
> is requiretty in sudo config. If that improves security I would
> rather not change that setting.
Did you try to use su instead? E.g., in my /etc/rc.local I have a bunch of
stuff run on behalf of users other than root. Like:
/bin/su lmgrd -c 'export
IDL_DIR=/usr/local/opt/flexlm/idl;/usr/local/opt/flex...
2015 Feb 12
0
Cronjob and sudo
On Thu, Feb 12, 2015 at 12:32:12PM -0600, Matt wrote:
> I need to remove empty files out of a directory that are over 6 hours
> old so I created this script and put it in cron.hourly.
For what it's worth, we no longer have requiretty in the package in
Fedora, so eventually that change will probably make it down to CentOS.
Overall, security benefit vanishingly small and inconvenience high.
I do think that the suggestion of using /etc/cron.d and cron's own user
feature is better in this case, though.
--
Matthew Miller
<...
2015 Oct 31
0
use pssh to restart a service
...Dunphy wrote:
> pssh -h es_list "/bin/sudo -S /bin/systemctl restart elasticsearch"
The default configuration prohibits use if input echo can't be
disabled. That means no "-S".
I modify that for users where necessary:
/etc/sudoers.d/myuser:
Defaults:myuser !requiretty, visiblepw
2015 Nov 02
0
use pssh to restart a service
...gument to pssh to get more information.
# cat /etc/sudoers.d/gordon
gordon ALL=(ALL) NOPASSWD: ALL
$ pssh -h t -i sudo echo true
[1] 16:02:12 [FAILURE] MYHOST Exited with error code 1
Stderr: sudo: sorry, you must have a tty to run sudo
# cat /etc/sudoers.d/gordon
Defaults:gordon !requiretty, visiblepw
gordon ALL=(ALL) NOPASSWD: ALL
$ pssh -h t -i sudo echo true
[1] 16:02:30 [SUCCESS] MYHOST
true
2009 Oct 12
2
scp with tty
Hello
I need to know a way to have scp allocate a tty on a remote machine
so I can have it run sudo and activate a vpn which it will need to
activate. scp with "-S" does not work. I can't chmod +s the cisco vpn client
because when I try to run it it says it can not have setuser.
I could have the user scp via root but I do not want to do that.
Any way to have scp allocate a tty?
2015 Nov 02
2
use pssh to restart a service
.../etc/sudoers.d/gordon
> gordon ALL=(ALL) NOPASSWD: ALL
>
> $ pssh -h t -i sudo echo true
> [1] 16:02:12 [FAILURE] MYHOST Exited with error code 1
> Stderr: sudo: sorry, you must have a tty to run sudo
>
>
>
> # cat /etc/sudoers.d/gordon
> Defaults:gordon !requiretty, visiblepw
> gordon ALL=(ALL) NOPASSWD: ALL
>
> $ pssh -h t -i sudo echo true
> [1] 16:02:30 [SUCCESS] MYHOST
> true
>
>
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/list...
2013 Sep 23
1
Howto: Extremely tight security rsync shell for backups
...d. (change the shell at the end of the line)
-------------------------------------
backupaccount:x:514:514::/home/backupaccount:/usr/local/bin/backupaccount.sh
# ON WEBSERVER
in /etc/sudoers
-------------------------------------
backupaccount ALL=NOPASSWD: /usr/bin/rsync
Defaults:backupaccount !requiretty
-------------------------------------
# ON WEBSERVER
And in /usr/local/bin/backupaccount.sh
-------------------------------------
#! /bin/sh
# look in this file to see what options were passed, if the rsync
doesn't work.
echo $* > /home/backupaccount/options.passed.sh
# rsync -va backupac...
2010 Feb 27
24
Call for testing: OpenSSH-5.4
Hi,
OpenSSH 5.4 is almost ready for release, so we would appreciate testing
on as many platforms and systems as possible. This is a big release,
with a number of major new features and many bug fixes.
Snapshot releases for portable OpenSSH are available from
http://www.mindrot.org/openssh_snap/
The OpenBSD version is available in CVS HEAD:
http://www.openbsd.org/anoncvs.html
Portable OpenSSH