HI All,
I am facing an issue in using pbrun command in ansible.
Here is what i specified in ansible.cfg
sudo_exe=/usr/local/bin/pbrun /bin/su -
Execution command :
ansible hostname -m command -a ‘id’ --become --become-user ngxid
In the verbose output it shows the below command :
/usr/local/bin/pbrun /bin/su - -H -S -n -u ngxid
In the manual scenario, we login to our remote server as demouser and run the below command to switch to ngxid user :
pbrun /bin/su - ngxid
But I dont see any flags that would allow me to pass the pbrun command in the exact same way. This is important because the same command has been updated in the pbrun -p mypolicy on the remote machine.
The command fails with below module_stdout : “Rejected. That command is not permitted by the powerbroker policy”
Can someone please suggest how to pass the pbrun commmand “pbrun /bin/su - ngxid” as per the configuration set in the powerbroker policy on the remote machine.
Thanks,
Prasad