is su_exe/become_exe broken in v2?

296 views
Skip to first unread message

Edgars

unread,
Sep 2, 2015, 6:02:39 AM9/2/15
to Ansible Project
Hi

I just pulled latest ansible from git and installed it. And it seems that su_exe functionality is not working anymore. Regardless of what I set as su_exe, ansible tries to execute su. I also tried to set become_exe to something else not su but ansible executes su.

[privilege_escalation]
become
= True
become_ask_pass
= True
become_user
= root
become_method
= su
become_exe
= /opt/CA/AccessControl/bin/sesu
become_flags
= -

EXEC /bin/sh -c 'su  root -c "/bin/sh -c '"'"'echo BECOME-SUCCESS-qvthdnsaxbhytsulkyamdelobeatwxnn;

Edgars

Brian Coca

unread,
Sep 2, 2015, 9:29:02 AM9/2/15
to Ansible Project
I just fixed this, pull latest and try again.

--
Brian Coca

Edgars

unread,
Sep 2, 2015, 9:43:23 AM9/2/15
to Ansible Project
Thanks, it works now with su_exe but still does not work with become_exe. But I am not sure if it supposed to be working with become_exe.

Edgar

Brian Coca

unread,
Sep 2, 2015, 9:52:02 AM9/2/15
to Ansible Project
just fixed become_exe also
> --
> You received this message because you are subscribed to the Google Groups
> "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ansible-proje...@googlegroups.com.
> To post to this group, send email to ansible...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ansible-project/e668eeef-2931-435e-a2ff-4867759522c2%40googlegroups.com.
>
> For more options, visit https://groups.google.com/d/optout.



--
Brian Coca

Edgars

unread,
Sep 2, 2015, 10:16:11 AM9/2/15
to Ansible Project
Confirmed

Edgars

unread,
Sep 2, 2015, 10:50:39 AM9/2/15
to Ansible Project
I just noticed that su_flags and become_flags settings are ignored. 

Edgars


trešdiena, 2015. gada 2. septembris 12:02:39 UTC+2, Edgars rakstīja:

Brian Coca

unread,
Sep 2, 2015, 11:02:22 AM9/2/15
to Ansible Project
They currently only work for sudo


--
Brian Coca

Edgars

unread,
Sep 2, 2015, 11:09:14 AM9/2/15
to Ansible Project
su_flags worked before, why it was changed?

Brian Coca

unread,
Sep 2, 2015, 11:18:31 AM9/2/15
to Ansible Project
Not as much 'changed' as 'yet to be implemented'.



--
Brian Coca
Reply all
Reply to author
Forward
0 new messages