问题:
I have server A and server B (both Ubuntu 10.04 LTS) doing different tasks. Server A needs to poke Server B, which generates a file and scp's it back to server A when done. This is all in-house and I am not too concerned about security issues. SSH Key exchange is already performed between servers A and B and works fine.
On server B, the script generateOfflineSig looks like
#!/bin/bash
echo "in script"
sudo apt-offline set offline_package.sig --install-packages "$0"
echo "after sudo"
scp offline_package.sig jeff@servera:/tmp
Also on server B, visudo has this entry:
jeff ALL=NOPASSWD: ALL
Which works if I execute sudo ls on Server B... no password asked.
Unfortunately SSH always asks for a password on Server A:
jeff@servera:~$ ssh -t jeff@serverb /home/jeff/generateOfflineSig "incron"
in script
[sudo] password for jeff:
Any ideas? This process can't be interrupted by password input.
回答:
It seems like I had a "typo" in the /etc/sudoers file...
jeff ALL=NOPASSWD: ALL
needed to be at the very end of file. Ubuntu Help only says Add (...) to the END of the file (if not at the end it can be nullified by later entries)
After that, password is never asked for "jeff's sudo commands, either locally or over SSH.
本文描述了在Ubuntu10.04LTS环境下,如何解决通过SSH连接无密码执行sudo命令并使用scp传输文件的问题。关键在于正确配置/etc/sudoers文件,确保NOPASSWD参数位于文件末尾。
1493

被折叠的 条评论
为什么被折叠?



