Avoiding root password

Question

I have done this modififcation:

vim /etc/sudoers
# User privilege specification
root    ALL=(ALL) NOPASSWD: ALL

When i use:

sudo service cassandra start 

it works without password. But, when i use:

script shell
ssh -t root@$machine -x "sshpass -p 'ubuntu' ssh -t ubuntu@$address -o   StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/nul -x 'sudo service cassandra start'"

i have to enter the password !

Have you please an idea why it didn't work with ssh ?

Thanks a lot for help. Best Regards.

Answer 1

The 'root' in the /etc/sudoers should be the ID of the user executing the commands.... In your example, this would be 'ubuntu' I believe.

You example does this:

1. logs into $machine as root (I assuming that you've set that machine to be able to logon as root. If not, you need to adjust your pam.d settings to allow root logins via ssh. This has nothing to do with sudo).
2. As root@#machine, your command ssh's to ubuntu@address and executes the command 'sudo service cassandra start'.

It looks by your example that you need to enable sudo for ubuntu and not root to be able to execute service commands.

Example:

# User privilege specification
ubuntu    ALL=(root) NOPASSWD: /usr/bin/service cassandra *

EDIT: I am really confused as to what you are trying to accomplish. If you are simply trying to ssh to another server and run that service command, all that is required is this in your shell script:

Your command would look like this:

sshpass -p 'ubuntu' ssh -t ubuntu@$address -o   StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/nul -x 'sudo service cassandra start'

Also, you still need to add my edits to /etc/sudoers per above to allow 'ubuntu' to execute that command.