Sudo privilege escalation is not working

[Barun kumar]

Hi Team,

I am trying to run a playbook book on client machine with sudo privilege,  

Getting below error. 

where clients /etc/sudoers file are updated with "All  All=!SUDOSUDO ".

Let me know how to proceed on this. 

[bala]

pl try adding user in suoder

%user ALL=(ALL) NOPASSWD: /bin/su - *
and in ansible.cfg
Use su as the become_method and also use sudo su - as become_exe

 

--
You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-proje...@googlegroups.com.
To post to this group, send email to ansible...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CADG%3DkosJgCfpNt45h_S%2Bp1%3D1YjKyTZsW-PJ2Xdu%3DMbCc-Ur4gQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[Dick Visser]

Also, you should not be running ansible as root on the control machine.

> To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CADUikpwVf8pjFcz9-gJYqCiiR9zz%2B3n528q9s5njyw8FFXZ0eA%40mail.gmail.com.

> For more options, visit https://groups.google.com/d/optout.

--
Dick Visser
Trust & Identity Service Operations Manager
GÉANT

[Barun kumar]

I am using root user to run ansible playbook,  and I do not have access to change user sudo permission in client machine. 

Any other idea?

To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CAL8fbwO3yMuGWpZ5ywP68vk8biO6WDgVYUvw60fvusUeuHp%3DkQ%40mail.gmail.com.