Project

General

Profile

Bug #3012

Mcollective does not need sudo to work properly

Added by Jasper Poppe about 8 years ago. Updated 3 months ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
Puppet
Target version:
-
Difficulty:
Triaged:
No
Bugzilla link:
Pull request:
Fixed in Releases:
Found in Releases:

Description

Mcollective will always run with sudo, see: lib/proxy/puppet/mcollective.rb. When MCollective is configured properly, sudo is not needed to run the MCollective client.

I suggest:
1) Remove the following line from lib/proxy/puppet/mcollective.rb:
cmd.push(which("sudo", "/usr/bin"))

2) Implementing option 1 will probably break mcollective support for people who configured MCollective in such a way that sudo is needed. Instead of removing the sudo line it would be nice to have a parameter which enables/disables the sudo command for mcollective.


Related issues

Related to Smart Proxy - Feature #3150: foreman-proxy support for invoking sudo as a different user for mcollectiveClosed2013-09-25

History

#1 Updated by Dominic Cleal about 8 years ago

  • Project changed from Foreman to Smart Proxy
  • Category changed from Smart Proxy to Puppet

#2 Updated by Greg Petras about 8 years ago

As Jasper mentioned, this will break MCollective for people who need the sudo piece. We're using Puppet Enterprise, which automatically sets up everything for MCollective under the peadmin account. I opened an issue here to add some logic around the sudo call:

http://projects.theforeman.org/issues/3150

#3 Updated by Dominic Cleal about 8 years ago

  • Related to Feature #3150: foreman-proxy support for invoking sudo as a different user for mcollective added

#4 Updated by Ewoud Kohl van Wijngaarden 3 months ago

  • Status changed from New to Rejected

In #30429 puppetrun support was removed.

Also available in: Atom PDF