user is not allowed to execute '/bin/sh -c echo BECOME-SUCCESS

[Riahi Mohamed-Amine]

Hi

i'm trying to run may first playbook with become_user : cftadmin and i got this error msg :

fatal: [ANS_IAWGAP01]: FAILED! => {"changed": false, "module_stderr": "Failed to add the host to the list of known hosts (/tmp/$USER/ansible/configuration/known_hosts).\r\nSorry, user C405372 is not allowed to execute '/bin/sh -c echo BECOME-SUCCESS-yzuuugnflqcoylvtkjanapdugeokgrat; /usr/bin/python' as cftadmin on iawgap01.\n", "module_stdout": "", "msg": "MODULE FAILURE", "rc": 1}

i put pipeline = True in ssh section :

ssh_args = -o GSSAPIAuthentication=yes -o UserKnownHostsFile=/tmp/$USER/ansible/configuration/known_hosts
scp_if_ssh=True
pipelining = true

can someone help me please ?

[Brian Coca]

It is a privilege escalation issue, recommend reading
https://docs.ansible.com/ansible/latest/user_guide/become.html
more specifically
https://docs.ansible.com/ansible/latest/user_guide/become.html#can-t-limit-escalation-to-certain-commands



--
----------
Brian Coca