SUDO or SU commands with password

Most of the super user accounts in our organization's Unix space have been set up to not allow direct log in (must log in as myself, then su - superuser, and provide password), and the sudo commands usually require a password at the prompt.

Has anyone come up with a good solution to at least execute a remote script with super user privileges, without the passwords showing in the logs?

Product: BuildMaster
Version: 4.6.1

This is a tricky issue no matter what you're using to automate scripts. As far as I know you have two options:

Edit the sudoers file using visudo and add the NOPASSWD flag to the login user so that sudo can be run without an interactive password prompt.
Connect via SSH using root.

It's not terribly uncommon for a deployment tool/script to have root-level access to a machine, but you're right that ultimately the password needs to be secured somewhere or just anyone can log in with full root privileges.

There's a bit of a discussion on superuser regarding this problem; some of the answers might be helpful: http://superuser.com/questions/243499/automating-the-sudo-su-user-command

Thanks for the pointers, Dean!