[RESOLVED] How to allow non-root user to shutdown

[stevemowbray]

"sudo shutdown -h now" remotely returns error:

Code: Select all

sudo: sorry, you must have a tty to run sudo

Add the "-t" option to your plink command line to allocate a pty. I have just verified that this works.

[NickC]

That last one should work, as should the one before. It wants the password for the user in question not the root password.

Code: Select all

[trevor@xps13 plugins]$ /sbin/shutdown -r now
==== AUTHENTICATING FOR org.freedesktop.login1.reboot ===
Authentication is required for rebooting the system.
Authenticating as: trevor
Password: 
==== AUTHENTICATION COMPLETE ===
[trevor@xps13 plugins]$ Connection to xps13 closed by remote host.
Connection to xps13 closed.
[/cpde][/quote]
Yep, they do.  Sorry Trevor, I didn't make it very clear those two work from SSH prompt but clearly won't work from a batch file due to the extra inputs required.

[TrevorH]

How does that fit with "We will need to have it send the users password for security"? That's exactly what it does.

[NickC]

How does that fit with "We will need to have it send the users password for security"? That's exactly what it does.

ok to send the remoteshutdown users password but would prefer not to have the root password laying around in batch files.

[NickC]

Simple answer now found:

Code: Select all

chmod +s /sbin/shutdown

then remote batch file works fine without any of the sudoers mess

Code: Select all

plink.exe -ssh -pw <password> remoteshutdown@n.n.n.n "/sbin/shutdown -h now"

[TrevorH]

ok to send the remoteshutdown users password but would prefer not to have the root password laying around in batch files.

It isn't asking for the root password, it's asking for the user's password.

[NickC]

It isn't asking for the root password, it's asking for the user's password.

Yes but the wrong user, not the one we are trying to use.

[TrevorH]

What? It's asking for the password for the user you are connecting as. If you connect as the wrong user then it will ask for the password for that user. Solution: connect as the user you want to use!

[NickC]

What? It's asking for the password for the user you are connecting as. If you connect as the wrong user then it will ask for the password for that user. Solution: connect as the user you want to use!

but it was asking for the password from the wrong user, let me explain:

Code: Select all

plink.exe -ssh -pw <password> remoteshutdown@n.n.n.n "/sbin/shutdown -h now"

turns out it wasn't asking for the password for the 'remoteshutdown' user rather it wanted the password for the 'nicktest' user!

[gerald_clark]

Do 'remoteshutdown' and 'nicktest' have the same user number in /etc/passwd?