[Bro] ganeti cluster with bro cluster

[Pierre Gaulon]

The workers are running on CentOS Linux release 7.2.1511 (Core).

The Defaults!/sbin/setcap !requiretty fixed the problem!

Thanks for your help!
Best regards,
Pierre Gaulon.

On 14/2/17 10:26, Dave Crawford wrote:
> Thanks for the feedback Pierre, what OS and version are you running
> Bro on?
>
> Modify the sudoers file to add an additional line to disable the tty
> requirement specifically for setcap.
>
> bro ALL=NOPASSWD: /sbin/setcap
> Defaults!/sbin/setcap !requiretty
>
> Let me know if that takes care of the issue and I’ll get my
> documentation updated.
>
> -Dave
>
>> On Feb 13, 2017, at 9:18 PM, Pierre Gaulon
>> <pierre.gaulon at transfer-to.com
>> <mailto:pierre.gaulon at transfer-to.com>> wrote:
>>
>> Hi Dave,
>>
>> First of all, thank you for your plugin, it is very useful! I am
>> using since a while.
>>
>> Last time I used it I ran into an error and had to change the code to
>> see it.
>> In the last line of the plugin I appended the reason of the FAIL when
>> it fails:
>>
>> self.message("{0} - Executing setcap: {1}".format(n.host, 'SUCCESS'
>> if success else 'FAIL ' + output[0]))
>>
>> The reason was:
>> sorry, you must have a tty to run sudo
>>
>> This is linked to the sudoers setting:
>> Defaults    requiretty
>>
>> In order to fix it I couldn't find a workaround using the command
>> given to the plugin (using -tt for instance). I just commented the
>> line using visudo.
>> Any ideas to make both compatible are still welcome!
>>
>> Hope it helps!
>> Best regards,
>> Pierre Gaulon.
>>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170214/2fafe1a4/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170214/2fafe1a4/attachment.bin