openstack team mailing list archive

["skible.openstack@xxxxxxxxx" <skible.openstack@xxxxxxxxx>]

Exactly ! I tried to use sudo directly but ended up with even more 
trouble with the l3 agent and openVswitch agent not being able to create 
ports on br-eth1 and br-ex !

My best solution for this right now is to keep the original rootwrap and 
restart your dhcp agent after your create any subnet ! that will create 
the namespace and and the dhcp instance :)

Hope this will be fixed soon.

regards,
Bilel
On 05/01/2013 07:23 PM, Steve Heistand wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> there is some talk that the /etc/sudoers needs tweaking,
> some people need the form:
>
> Defaults:quantum !requiretty
> quantum ALL = (root) NOPASSWD: /usr/bin/quantum-rootwrap
>
> (added !requiretty thing)
>
> personally that didnt work for me and just commented it out and went with:
>
> quantum ALL=NOPASSWD: ALL
>
> then I got no more issues with sudo.
> but this may or may not be within your security guidelines.
>
> s
>
>
> On 05/01/2013 10:16 AM, skible.openstack@xxxxxxxxx wrote:
> > On 05/01/2013 04:34 PM, Gary Kotton wrote:
> > > Hi, Can you please ensure that you have the following configured in the
> > > quantum.conf file:
> > >
> > > [AGENT] root_helper = sudo /usr/bin/quantum-rootwrap /etc/quantum/rootwrap.conf
> > >
> > > Thanks Gary
> > Hi Gary,
> >
> > No i don't ! I have this format actually : root_helper = sudo quantum-rootwrap
> > /etc/quantum/rootwrap.conf
> >
> > I changed the root helper to your format but still got the same error in my log !
> > Stderr: "sudo: no tty present and no askpass program specified\nSorry, user quantum
> > is not allowed to execute '/sbin/ip netns exec
> > qdhcp-540fc9b1-4516-4cf4-bfae-f01043cba228 quantum-ns-metadata-proxy
> > --pid_file=/var/lib/quantum/external/pids/540fc9b1-4516-4cf4-bfae-f01043cba228.pid
> > --network_id=540fc9b1-4516-4cf4-bfae-f01043cba228 --state_path=/var/lib/quantum
> > --metadata_port=80
> > --log-file=quantum-ns-metadata-proxy540fc9b1-4516-4cf4-bfae-f01043cba228.log
> > --log-dir=/var/log/quantum' as root on node-f01.\n"
> >
> > regards, Bilel
> >
> > _______________________________________________ Mailing list:
> > https://launchpad.net/~openstack Post to     : openstack@xxxxxxxxxxxxxxxxxxx
> > Unsubscribe : https://launchpad.net/~openstack More help   :
> > https://help.launchpad.net/ListHelp
> - -- 
> ************************************************************************
>   Steve Heistand                          NASA Ames Research Center
>   email: steve.heistand@xxxxxxxx          Steve Heistand/Mail Stop 258-6
>   ph: (650) 604-4369                      Bldg. 258, Rm. 232-5
>   Scientific & HPC Application            P.O. Box 1
>   Development/Optimization                Moffett Field, CA 94035-0001
> ************************************************************************
>   "Any opinions expressed are those of our alien overlords, not my own."
>
> # For Remedy                        #
> #Action: Resolve                    #	
> #Resolution: Resolved               #
> #Reason: No Further Action Required #
> #Tier1:	User Code                   #
> #Tier2:	Other                       #
> #Tier3:	Assistance                  #
> #Notification: None                 #
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.14 (GNU/Linux)
>
> iEYEARECAAYFAlGBT6IACgkQoBCTJSAkVrF+LQCfTAhrdlSwvd9bzh+3tDL4phQW
> phkAn2XPFkvuF8/+LeIFNLbtTaej2W1u
> =dusc
> -----END PGP SIGNATURE-----