Hi All,
I am facing issues with being able to login with my credentials and then 
sudo (become) msp user.. 
When I manually ssh to the test_server, I use the command "sudo su - msp" 
to switch user and run few commands. But it doesnt seem to be working with 
ansibal.

Can someone please help?


Playbook:
- hosts: test_servers
  become: yes
  tasks:
  - shell: whoami
  
Command to run:
ansible-playbook b02.yml -u fn.last --ask-pass

cfg Entries:
[privilege_escalation]
become=True
become_method=sudo
become_user=msp
become_ask_pass=True

Output
$ ansible-playbook b02.yml -u fn.last --ask-pass
SSH password:
SUDO password[defaults to SSH password]:

PLAY [test_servers] 
************************************************************

TASK [setup] 
*******************************************************************
fatal: [10.6.48.231]: FAILED! => {"changed": false, "failed": true, 
"module_stderr": "", "module_stdout": "\r\nSorry, user fn.last is not 
allowed to execute '/bin/sh -c echo 
BECOME-SUCCESS-glazbpbnkugukpfbzcrgnqvrudvwsevw; LANG=en_US.UTF-8 
LC_ALL=en_US.UTF-8 LC_MESSAGES=en_US.UTF-8 /opt/msp/pkg/python/bin/python 
/tmp/ansible-tmp-1458116615.7-96652222108952/setup' as msp on 
LQASEDCODAP008V.\r\n", "msg": "MODULE FAILURE", "parsed": false}

NO MORE HOSTS LEFT 
*************************************************************
to retry, use: --limit @b02.retry

PLAY RECAP 
*********************************************************************
10.6.48.231                : ok=0    changed=0    unreachable=0    failed=1

TIA
Srini

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/4496f5be-5fcf-4b7e-b102-1b8e9ee6137f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to