Thanks for the responses. I think this is what I want to do. I commented out

       #Defaults    requiretty

in /etc/sudo. But what I really wanted to do was just place it in VPNUSERS:

 %vpnusers     ALL=NOPASSWD: /sbin/service myciscovpn start, \
             /sbin/service myciscovpn stop,  \
             /sbin/service myciscovpn status, \
             /usr/bin/mycisco, /usr/local/bin/vpnclient

visudo took it but it did not work. Actually if I could just put it in user tony that would be best:

tony ALL=(ALL) NOPASSWD: ALL !requiretty

But that gives a syntax error. What is the correct way to specify it?

For one, I *hope* that you used visudo, and not just vi.

Second, leave the Defaults: requiretty in, put tony as the very last thing in the file, and put Defaults: !requiretty just above it.

mark

-----Original Message-----

...

Well, I noticed that ssh/scp probably requires tty and when called from a script, its not from a tty.

At least in my case which was drupal calling a script that lauched ssh, a non tty source.

I also required running privileged commands.

Mebbe you don't need all this so check your logs and see what happens.

My last job, I was setting up rsync backups. What I did was create a user, backup, then in /etc/sudoers, have !requiretty *only* for that user. The user was also limited in what commands it could run (in that case, rsync only).

Don't forget to log in as that user first, so that you don't get the "Oh, This is a new IP, are you Sure you want to continue connecting?!?!"

mark

---

CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos