Ttyjfyk

Create chunks from an array

Did Amazon pay $0 in taxes last year?

Issue with units for a rocket nozzle throat area problem

Can I negotiate a patent idea for a raise, under French law?

Short story about cities being connected by a conveyor belt

direct sum of representation of product groups

How can I have x-axis ticks that show ticks scaled in powers of ten?

After Brexit, will the EU recognize British passports that are valid for more than ten years?

Does the US political system, in principle, allow for a no-party system?

What can I do if someone tampers with my SSH public key?

An Undercover Army

Professor forcing me to attend a conference, I can't afford even with 50% funding

A running toilet that stops itself

Ultrafilters as a double dual

Limpar string com Regex

What is better: yes / no radio, or simple checkbox?

How to install "rounded" brake pads

Giving a career talk in my old university, how prominently should I tell students my salary?

Is "cogitate" used appropriately in "I cogitate that success relies on hard work"?

Boss Telling direct supervisor I snitched

What does it take to become a wilderness skills guide as a business?

In Diabelli's "Duet in D" for piano, what are these brackets on chords that look like vertical slurs?

Are brahmins allowed to drink alcohol?

The (Easy) Road to Code

Allow user to run PHP-FPM without password using sudoers

using sudo on GUI applicationsrun 'service php5-fpm restart' without using sudoUsing sudoers to allow php to run commandNginX + PHP-FPM displays blank php pagesI keep getting error: PHP Startup - libphp5.so missing? PHP seems to run fine with ApacheRestart PHP-FPM from a PHP scriptusing sudoers to allow non-privileged user to restart apacheAllow user to run command as another user with their environment in sudoersHow to kill stuck php-fpm processessudoers - allow user to ssh as another user and run a specific command

0

I'm trying to make it so a user can reload PHP-FPM without needing a password everytime.

I've added the following to the /etc/sudoers file using pkexec visudo, and there are no syntax errors, but it is still not working, any ideas?

Defaults exempt_group=forge
User_Alias FORGE = forge
Cmnd_Alias FORGE_COMMANDS = /usr/sbin/service php-fpm *
FORGE ALL = (ALL) NOPASSWD: FORGE_COMMANDS

I've hunted everywhere and this seems to be a common problem of getting it to work, but each question doesn't seem to have an answer, or one that works for me.

Using CentOS 7.

Thanks.

---

When using sudo -u I get the following:

==== AUTHENTICATING FOR org.freedesktop.systemd1.manage-units ===
Authentication is required to manage system services or units.
Multiple identities can be used for authentication:

I can then proceed as normal, but the point is for forge to be able to do this without requiring authentication.

centos sudo php5

share|improve this question

edited Sep 20 '17 at 20:26

Seán McCabe

asked Sep 19 '17 at 4:22

Seán McCabeSeán McCabe

1011

bumped to the homepage by Community♦ 10 mins ago

This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  What happens when you manually run the command manually with sudo -u
  
  – Raman Sailopal
  Sep 19 '17 at 8:59
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @RamanSailopal see edit above.
  
  – Seán McCabe
  Sep 20 '17 at 20:26
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  If you run "sudo -u forge sudo /usr/sbin/service php-fpm" and you are still getting a password prompt, there is an error in your sudoers configuration
  
  – Raman Sailopal
  Sep 21 '17 at 9:40
  

  
  
  
  

add a comment | 

0

I'm trying to make it so a user can reload PHP-FPM without needing a password everytime.

I've added the following to the /etc/sudoers file using pkexec visudo, and there are no syntax errors, but it is still not working, any ideas?

Defaults exempt_group=forge
User_Alias FORGE = forge
Cmnd_Alias FORGE_COMMANDS = /usr/sbin/service php-fpm *
FORGE ALL = (ALL) NOPASSWD: FORGE_COMMANDS

I've hunted everywhere and this seems to be a common problem of getting it to work, but each question doesn't seem to have an answer, or one that works for me.

Using CentOS 7.

Thanks.

---

When using sudo -u I get the following:

==== AUTHENTICATING FOR org.freedesktop.systemd1.manage-units ===
Authentication is required to manage system services or units.
Multiple identities can be used for authentication:

I can then proceed as normal, but the point is for forge to be able to do this without requiring authentication.

centos sudo php5

share|improve this question

edited Sep 20 '17 at 20:26

Seán McCabe

asked Sep 19 '17 at 4:22

Seán McCabeSeán McCabe

1011

bumped to the homepage by Community♦ 10 mins ago

This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  What happens when you manually run the command manually with sudo -u
  
  – Raman Sailopal
  Sep 19 '17 at 8:59
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @RamanSailopal see edit above.
  
  – Seán McCabe
  Sep 20 '17 at 20:26
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  If you run "sudo -u forge sudo /usr/sbin/service php-fpm" and you are still getting a password prompt, there is an error in your sudoers configuration
  
  – Raman Sailopal
  Sep 21 '17 at 9:40
  

  
  
  
  

add a comment | 

I'm trying to make it so a user can reload PHP-FPM without needing a password everytime.

I've added the following to the /etc/sudoers file using pkexec visudo, and there are no syntax errors, but it is still not working, any ideas?

Defaults exempt_group=forge
User_Alias FORGE = forge
Cmnd_Alias FORGE_COMMANDS = /usr/sbin/service php-fpm *
FORGE ALL = (ALL) NOPASSWD: FORGE_COMMANDS

I've hunted everywhere and this seems to be a common problem of getting it to work, but each question doesn't seem to have an answer, or one that works for me.

Using CentOS 7.

Thanks.

---

When using sudo -u I get the following:

==== AUTHENTICATING FOR org.freedesktop.systemd1.manage-units ===
Authentication is required to manage system services or units.
Multiple identities can be used for authentication:

I can then proceed as normal, but the point is for forge to be able to do this without requiring authentication.

centos sudo php5

share|improve this question

edited Sep 20 '17 at 20:26

Seán McCabe

asked Sep 19 '17 at 4:22

Seán McCabeSeán McCabe

1011

Defaults exempt_group=forge
User_Alias FORGE = forge
Cmnd_Alias FORGE_COMMANDS = /usr/sbin/service php-fpm *
FORGE ALL = (ALL) NOPASSWD: FORGE_COMMANDS

share|improve this question

edited Sep 20 '17 at 20:26

Seán McCabe

asked Sep 19 '17 at 4:22

Seán McCabeSeán McCabe

1011

share|improve this question

edited Sep 20 '17 at 20:26

Seán McCabe

asked Sep 19 '17 at 4:22

Seán McCabeSeán McCabe

1011

asked Sep 19 '17 at 4:22

Seán McCabeSeán McCabe

1011

asked Sep 19 '17 at 4:22

Seán McCabeSeán McCabe

1011

1 Answer
1

active

oldest

votes

0

Managed to get this working after additional hunting.

Turns out the addition to the sudoers file needed to be in the right place, not just at the bottom of the file where everyone apparently tells you to put it.

So after:

## Allows members of the users group to shutdown this system
# %users localhost=/sbin/shutdown -h now

and before:

## Read drop-in files from /etc/sudoers.d (the # here does not mean a comment)
#includedir /etc/sudoers.d

I put in:

## Allows forge to restart the php-fpm service
forge ALL=NOPASSWD: /usr/sbin/service php-fpm restart

Hopefully this will help a few people out, seems to be a lot of people out there having the same issue.

Just replace forge with the user you want to grant the permission too.

share|improve this answer

answered Sep 21 '17 at 20:47

Seán McCabeSeán McCabe

1011

add a comment | 

Your Answer

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f393094%2fallow-user-to-run-php-fpm-without-password-using-sudoers%23new-answer', 'question_page');

);

Post as a guest

Name

Email

Required, but never shown

0

Managed to get this working after additional hunting.

Turns out the addition to the sudoers file needed to be in the right place, not just at the bottom of the file where everyone apparently tells you to put it.

So after:

## Allows members of the users group to shutdown this system
# %users localhost=/sbin/shutdown -h now

and before:

## Read drop-in files from /etc/sudoers.d (the # here does not mean a comment)
#includedir /etc/sudoers.d

I put in:

## Allows forge to restart the php-fpm service
forge ALL=NOPASSWD: /usr/sbin/service php-fpm restart

Hopefully this will help a few people out, seems to be a lot of people out there having the same issue.

Just replace forge with the user you want to grant the permission too.

share|improve this answer

answered Sep 21 '17 at 20:47

Seán McCabeSeán McCabe

1011

add a comment | 

0

Managed to get this working after additional hunting.

Turns out the addition to the sudoers file needed to be in the right place, not just at the bottom of the file where everyone apparently tells you to put it.

So after:

## Allows members of the users group to shutdown this system
# %users localhost=/sbin/shutdown -h now

and before:

## Read drop-in files from /etc/sudoers.d (the # here does not mean a comment)
#includedir /etc/sudoers.d

I put in:

## Allows forge to restart the php-fpm service
forge ALL=NOPASSWD: /usr/sbin/service php-fpm restart

Hopefully this will help a few people out, seems to be a lot of people out there having the same issue.

Just replace forge with the user you want to grant the permission too.

share|improve this answer

answered Sep 21 '17 at 20:47

Seán McCabeSeán McCabe

1011

add a comment | 

Managed to get this working after additional hunting.

Turns out the addition to the sudoers file needed to be in the right place, not just at the bottom of the file where everyone apparently tells you to put it.

So after:

## Allows members of the users group to shutdown this system
# %users localhost=/sbin/shutdown -h now

and before:

## Read drop-in files from /etc/sudoers.d (the # here does not mean a comment)
#includedir /etc/sudoers.d

I put in:

## Allows forge to restart the php-fpm service
forge ALL=NOPASSWD: /usr/sbin/service php-fpm restart

Hopefully this will help a few people out, seems to be a lot of people out there having the same issue.

Just replace forge with the user you want to grant the permission too.

share|improve this answer

answered Sep 21 '17 at 20:47

Seán McCabeSeán McCabe

1011

## Allows members of the users group to shutdown this system
# %users localhost=/sbin/shutdown -h now

## Read drop-in files from /etc/sudoers.d (the # here does not mean a comment)
#includedir /etc/sudoers.d

## Allows forge to restart the php-fpm service
forge ALL=NOPASSWD: /usr/sbin/service php-fpm restart

share|improve this answer

answered Sep 21 '17 at 20:47

Seán McCabeSeán McCabe

1011

answered Sep 21 '17 at 20:47

Seán McCabeSeán McCabe

1011

answered Sep 21 '17 at 20:47

Seán McCabeSeán McCabe

1011