<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Woo! 2 for 2!<div><br><div style=""><div>On Jul 30, 2014, at 12:56 PM, Jeff Silverman <<a href="mailto:jeff@sweetlabs.com">jeff@sweetlabs.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div dir="ltr"><div class="gmail_default" style="font-family:times new roman,serif">That seems to have resolved the issue.</div><div class="gmail_default" style="font-family:times new roman,serif"><br></div><div class="gmail_default" style="font-family:times new roman,serif">
Thank you</div><div class="gmail_default" style="font-family:times new roman,serif"><br></div><div class="gmail_default" style="font-family:times new roman,serif"><br></div><div class="gmail_default" style="font-family:times new roman,serif">
Jeff</div><div class="gmail_default" style="font-family:times new roman,serif"><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Jul 30, 2014 at 12:13 PM, Abel Lopez <span dir="ltr"><<a href="mailto:alopgeek@gmail.com" target="_blank">alopgeek@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">Couple of things I’d check, first make sure /etc/sudoers has the “#includedir /etc/sudoers.d” <div>
It must have the #, that’s not a comment, that’s what the directive looks like.</div><div><br></div><div>Secondly, parse the file with visudo to make sure it’s syntactically correct, both the /etc/sudoers and any file that may be in /etc/sudoers.d/</div>
<div>Your nova user’s shell is fine, mine is /bin/false, </div><div><br><div><div><div class="h5"><div>On Jul 30, 2014, at 12:04 PM, Jeff Silverman <<a href="mailto:jeff@sweetlabs.com" target="_blank">jeff@sweetlabs.com</a>> wrote:</div>
<br></div></div><blockquote type="cite"><div><div class="h5"><div dir="ltr"><div class="gmail_default" style="font-family:'times new roman',serif">I had several openstack daemons running properly after going through the set up process. I decided to reboot the machine (because it's going to reboot sooner or later and I wanted to find out what would go wrong before we pressed the system into production). Several of the daemons don't start properly. In all cases, there is an error message in the log files of the form:</div>
<div class="gmail_default" style="font-family:'times new roman',serif"><br></div><div class="gmail_default" style="font-family:'times new roman',serif"><pre>2014-07-30 10:56:57.349 878 CRITICAL nova [-] ProcessExecutionError: Unexpected error while running command.<br>
Command: sudo nova-nn /etc/nova/rootwrap.conf iptables-save -c<br>Exit code: 1<br>Stdout: ''<br>Stderr: 'sudo: no tty present and no askpass program specified\n'<br></pre></div><div class="gmail_default" style="font-family:'times new roman',serif">
<br></div><div class="gmail_default" style="font-family:'times new roman',serif">I have googled the error message and I find several items of advice, all of which I have taken and none of which have resolved my issue:</div>
<div class="gmail_default" style="font-family:'times new roman',serif"><br></div><div class="gmail_default"><ul><li><font face="times new roman, serif">Remove the defaults requiretty from the /etc/sudoers file. I have done both </font><tt><font color="#00cccc">#Defaults requiretty</font></tt> and <tt><font color="#ff6600">Defaults</font> <font color="#00cccc">!requiretty</font></tt> <font face="times new roman, serif">and tried again. No joy.</font></li>
<li><font face="times new roman, serif">I added the following line to nova.conf:</font><br><font face="courier new, monospace">root_helper=sudo nova-rootwrap</font><br><font face="times new roman, serif">no joy, there, either.</font></li>
<li><font face="times new roman, serif">Interestingly enough, if I give the
command
<kbd>sudo nova-rootwrap /etc/nova/rootwrap.conf iptables-save -c</kbd>
<br>
from the command line as user root, then it works.</font></li><li><font face="times new roman, serif">I notice that user nova is in</font><font face="courier new, monospace"> /etc/passwd</font><font face="times new roman, serif"> with shell</font><font face="courier new, monospace"> /bin/nologin</font><font face="times new roman, serif">. I assume that that's there for a reason, so I am reluctant to change it.</font></li>
<li><font face="times new roman, serif">If I give the command</font><br><font face="courier new, monospace">sudo nova-nn whoami</font><br><font face="times new roman, serif">I get:</font><br><font face="courier new, monospace">sudo: nova-nn: command not found</font></li>
<li style="font-family:'times new roman',serif"><br></li></ul></div><div class="gmail_default" style="font-family:'times new roman',serif"><br></div><div class="gmail_default" style="font-family:'times new roman',serif">
I am open to additional suggestions. I am running on Centos 6.5</div><div class="gmail_default" style="font-family:'times new roman',serif"><br></div><div><br></div>-- <br><div dir="ltr"><b>Jeff Silverman</b><div>
Systems Engineer</div><div><a href="tel:%28253%29%20459-2318" value="+12534592318" target="_blank">(253) 459-2318</a> (c)</div><div><img src="https://dl.dropboxusercontent.com/u/16943296/SweetLabs-Signatures/New_2014/signature-logo.png"><br>
</div></div>
</div></div></div>
_______________________________________________<br>OpenStack-operators mailing list<br><a href="mailto:OpenStack-operators@lists.openstack.org" target="_blank">OpenStack-operators@lists.openstack.org</a><br><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators</a><br>
</blockquote></div><br></div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><b>Jeff Silverman</b><div>Systems Engineer</div><div>(253) 459-2318 (c)</div><div><img src="https://dl.dropboxusercontent.com/u/16943296/SweetLabs-Signatures/New_2014/signature-logo.png"><br>
</div></div>
</div>
</blockquote></div><br></div></body></html>