-
Type:
Wish
-
Status: Closed
-
Priority:
Major
-
Resolution: Fixed
-
Fix Version/s: Jul 2016
-
Component/s: Unix Groups
-
Labels:None
Please add me (mf) to sudoers on the machine svn-qavm2. I'm the author of the irc bot wayita and want to help Daniel Shahaf to make sure that nothing gets lost in case we have to move it.
Quoting an email from danielsh@apache.org:
Martin Edgar Furter Rathod wrote on Wed, Jul 20, 2016 at 21:09:08 +0530:
> Today i tried to login to wayita on svn-qavm2 but had some troubles.
> "ssh mf@svn-qavm2.apache.org" worked fine. But "sudo -u wayita -s"
> failed with the message "sudo: pam_authenticate: User not known to
> the underlying authentication module".
>
> Am I doing something wrong?
Two things:
1. You haven't initialized OPIE; to do so, run ortpasswd on the VM as
yourself.
2. You aren't in sudoers:
svn-qavm2% groups mf
mf : mf committers subversion
svn-qavm2% sudo grep -w mf /etc/sudoers /etc/sudoers.d/*
svn-qavm2%
This needs to be fixed by infra. Once you have set up OPIE as in (1),
file a jira ticket requesting access. On the ticket you may be asked
for PMC member's +1; if that happens, quote this:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[Thu, 21 Jul 2016 06:11:20 +0000] I am +1 on giving mf@apache.org sudo access to user 'wayita' on svn-qavm2.apache.org [with my SVN PMC hat on].
-----BEGIN PGP SIGNATURE-----
iQGcBAEBAgAGBQJXkGeTAAoJEKX+7jrHk3REs3QL/2fsqkFT4kBua70ksfpVkPcl
e2bBEhZfqcKCXkUfMdkTMcD/mAjzyLj07WaBJR+UOY6WgDyYDZf26ME26tZmXQ9W
6t7aPLrDc+ardkJsMVFjtyhpb5ce7NJQrybg6Jvuyox1FM5vBn+Zl5QBg+d0B976
4iUo/MKvz9MxtwIUhYe9vh9mM4rFF8yGPgKlVtjXxTitRtTE+WTgEt12Z5B0ebKK
eDHSkkSdJP77MyXeiDE8QjGdFUVgsA6LUv/WB2pqjJE/b/OAOpdxR+EMslZiZXQh
dSTML3dQOXs89RxdlVjYLmIQcW6/oV//m8mE7PvE18RHq/uehDddQH1QIExpl2C+
sV45VKBxM3tUBkH2fueEk0JxWI9Q8tfMMGocRL/Kh6/VgB1HdTlNv/wkwImYku19
nq5G9hSmEhQbDok2jzvuokxys6Z/9HG7vtrNBPoHQ6esoWzkW24fSZ5+FhF1mBab
vtvNXBU6kYnVyAx4nEh9DvXhcR4D1L9PsvG1YiacCw==
=331x
-----END PGP SIGNATURE-----
Quoting an email from danielsh@apache.org:
Martin Edgar Furter Rathod wrote on Wed, Jul 20, 2016 at 21:09:08 +0530:
> Today i tried to login to wayita on svn-qavm2 but had some troubles.
> "ssh mf@svn-qavm2.apache.org" worked fine. But "sudo -u wayita -s"
> failed with the message "sudo: pam_authenticate: User not known to
> the underlying authentication module".
>
> Am I doing something wrong?
Two things:
1. You haven't initialized OPIE; to do so, run ortpasswd on the VM as
yourself.
2. You aren't in sudoers:
svn-qavm2% groups mf
mf : mf committers subversion
svn-qavm2% sudo grep -w mf /etc/sudoers /etc/sudoers.d/*
svn-qavm2%
This needs to be fixed by infra. Once you have set up OPIE as in (1),
file a jira ticket requesting access. On the ticket you may be asked
for PMC member's +1; if that happens, quote this:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[Thu, 21 Jul 2016 06:11:20 +0000] I am +1 on giving mf@apache.org sudo access to user 'wayita' on svn-qavm2.apache.org [with my SVN PMC hat on].
-----BEGIN PGP SIGNATURE-----
iQGcBAEBAgAGBQJXkGeTAAoJEKX+7jrHk3REs3QL/2fsqkFT4kBua70ksfpVkPcl
e2bBEhZfqcKCXkUfMdkTMcD/mAjzyLj07WaBJR+UOY6WgDyYDZf26ME26tZmXQ9W
6t7aPLrDc+ardkJsMVFjtyhpb5ce7NJQrybg6Jvuyox1FM5vBn+Zl5QBg+d0B976
4iUo/MKvz9MxtwIUhYe9vh9mM4rFF8yGPgKlVtjXxTitRtTE+WTgEt12Z5B0ebKK
eDHSkkSdJP77MyXeiDE8QjGdFUVgsA6LUv/WB2pqjJE/b/OAOpdxR+EMslZiZXQh
dSTML3dQOXs89RxdlVjYLmIQcW6/oV//m8mE7PvE18RHq/uehDddQH1QIExpl2C+
sV45VKBxM3tUBkH2fueEk0JxWI9Q8tfMMGocRL/Kh6/VgB1HdTlNv/wkwImYku19
nq5G9hSmEhQbDok2jzvuokxys6Z/9HG7vtrNBPoHQ6esoWzkW24fSZ5+FhF1mBab
vtvNXBU6kYnVyAx4nEh9DvXhcR4D1L9PsvG1YiacCw==
=331x
-----END PGP SIGNATURE-----