# user is not allowed to execute '/bin/sh -c echo BECOME-SUCCESS

**URL:** <https://forum.ansible.com/t/user-is-not-allowed-to-execute-bin-sh-c-echo-become-success/28679>\
**Category:** Ansible Project\
**Created:** [September 28, 2018, 10:57pm UTC](https://forum.ansible.com/t/user-is-not-allowed-to-execute-bin-sh-c-echo-become-success/28679 "2018-09-28T22:57:39Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Riahi\_Mohamed-Amine](https://avatars.discourse-cdn.com/v4/letter/r/eb8c5e/32.png) [@Riahi\_Mohamed-Amine](https://forum.ansible.com/u/Riahi_Mohamed-Amine)\
**Post date:** [September 28, 2018, 10:57pm UTC](https://forum.ansible.com/t/user-is-not-allowed-to-execute-bin-sh-c-echo-become-success/28679/1 "2018-09-28T22:57:39Z")

</div>

Hi

i’m trying to run may first playbook with become\_user : cftadmin and i got this error msg :

fatal: [ANS\_IAWGAP01]: FAILED! =\> {“changed”: false, “module\_stderr”: “Failed to add the host to the list of known hosts (/tmp/$USER/ansible/configuration/known\_hosts).\r\nSorry, user C405372 is not allowed to execute ‘/bin/sh -c echo BECOME-SUCCESS-yzuuugnflqcoylvtkjanapdugeokgrat; /usr/bin/python’ as cftadmin on iawgap01.\n”, “module\_stdout”: “”, “msg”: “MODULE FAILURE”, “rc”: 1}

i put pipeline = True in ssh section :

ssh\_args = -o GSSAPIAuthentication=yes -o UserKnownHostsFile=/tmp/$USER/ansible/configuration/known\_hosts  
scp\_if\_ssh=True  
pipelining = true

can someone help me please ?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/ansible/original/1X/1882d9a01da5d8996a862359b0913cc568a39b84.svg) [@system](https://forum.ansible.com/u/system)\
**Post date:** [October 11, 2018, 7:04pm UTC](https://forum.ansible.com/t/user-is-not-allowed-to-execute-bin-sh-c-echo-become-success/28679/2 "2018-10-11T19:04:54Z")

</div>

It is a privilege escalation issue, recommend reading  
[https://docs.ansible.com/ansible/latest/user\_guide/become.html](https://docs.ansible.com/ansible/latest/user_guide/become.html)  
more specifically  
[https://docs.ansible.com/ansible/latest/user\_guide/become.html#can-t-limit-escalation-to-certain-commands](https://docs.ansible.com/ansible/latest/user_guide/become.html#can-t-limit-escalation-to-certain-commands)
