Welcome to the Inedo Forums! Check out the Forums Guide for help getting started.
If you are experiencing any issues with the forum software, please visit the Contact Form on our website and let us know!
SUDO or SU commands with password
-
Most of the super user accounts in our organization's Unix space have been set up to not allow direct log in (must log in as myself, then su - superuser, and provide password), and the sudo commands usually require a password at the prompt.
Has anyone come up with a good solution to at least execute a remote script with super user privileges, without the passwords showing in the logs?
Product: BuildMaster
Version: 4.6.1 -
This is a tricky issue no matter what you're using to automate scripts. As far as I know you have two options:
-
Edit the sudoers file using visudo and add the NOPASSWD flag to the login user so that sudo can be run without an interactive password prompt.
-
Connect via SSH using root.
It's not terribly uncommon for a deployment tool/script to have root-level access to a machine, but you're right that ultimately the password needs to be secured somewhere or just anyone can log in with full root privileges.
There's a bit of a discussion on superuser regarding this problem; some of the answers might be helpful: http://superuser.com/questions/243499/automating-the-sudo-su-user-command
-
-
Thanks for the pointers, Dean!
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login