<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
I removed the redundant file and verified my entry in /etc/sudoers is exactly as you have it below.</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
I have a single BIRDC entry in my files. I have 2 .env files for ipv4 and ipv6 which have a corresponding DNS entry for each.</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> /srv/birdseye/bin/birdc</span><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> and
</span><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> /usr/bin/sudo</span><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> files
exist, and I was able to invoke </span><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">sudo -u www-data /usr/bin/sudo /srv/birdseye/bin/birdc -2 -s /var/run/bird/bird-rs1-lan1-ipv4.ctl
"show status" with the same output as you have shown.</span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"><br>
</span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">Thank you for the help,</span></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 15px; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">Austin Davis</span></div>
</div>
<div id="appendonsend"></div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<hr style="display: inline-block; width: 98%;">
<div dir="ltr" id="divRplyFwdMsg"><span style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"><b>From:</b> ixpmanager <ixpmanager-bounces@inex.ie> on behalf of Barry O'Donovan (INEX) via ixpmanager <ixpmanager@inex.ie><br>
<b>Sent:</b> Friday, January 26, 2024 4:17 AM<br>
<b>To:</b> INEX IXP Manager Users Mailing List <ixpmanager@inex.ie><br>
<b>Cc:</b> Barry O'Donovan (INEX) <barry.odonovan@inex.ie><br>
<b>Subject:</b> Re: [ixpmanager] Looking Glass 500 Server Error :: Syntax error</span>
<div> </div>
</div>
<div><span style="font-size: 11pt;">[You don't often get email from ixpmanager@inex.ie. Learn why this is important at
<a href="https://aka.ms/LearnAboutSenderIdentification" id="OWAc9e6dd4c-2264-f429-564b-9801d9d46e56" class="OWAAutoLink" data-auth="NotApplicable" data-loopstyle="linkonly">
https://aka.ms/LearnAboutSenderIdentification</a> ]<br>
<br>
Caution: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe<br>
<br>
<br>
Austin Davis via ixpmanager wrote on 26/01/2024 06:17:<br>
> journalctl -t lighttpd shows this error whenever I try to access from<br>
> either api or direct:<br>
> "sudo: a terminal is required to read the password; either use the -S<br>
> option to read from standard input or configure an askpass helper"<br>
><br>
> /var/log/lighttpd/error.log doesn't have any errors in it.<br>
><br>
> I've added "www-data ALL=(ALL) NOPASSWD: /srv/birdseye/bin/birdc" to<br>
> both /etc/sudoers and /etc/sudoers.d/birdseye<br>
<br>
I would remove one of these to reduce the problem space. Either should<br>
work but /etc/sudoers is the canonical file so would be a better choice<br>
for resolving this for now.<br>
<br>
Your entry should read exactly:<br>
<br>
www-data ALL=(ALL) NOPASSWD: /srv/birdseye/bin/birdc<br>
<br>
You should have a single BIRDC entry in your Birdseye configuration file<br>
- e.g.:<br>
<br>
<br>
BIRDC="/usr/bin/sudo /srv/birdseye/bin/birdc -2 -s<br>
/var/run/bird/bird-rs1-lan1-ipv4.ctl"<br>
<br>
All of these files should exist:<br>
<br>
xxx@rs1:~# file /srv/birdseye/bin/birdc<br>
/srv/birdseye/bin/birdc: Bourne-Again shell script, ASCII text executable<br>
<br>
xxx@rs1:~# file /usr/bin/sudo<br>
/usr/bin/sudo: setuid ELF 64-bit LSB pie executable, x86-64, version 1<br>
(SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2,<br>
BuildID[sha1]=b4b1e0966fbda253405de02862b0e78b295f9e17, for GNU/Linux<br>
3.2.0, stripped<br>
<br>
If everything is working you should be able to invoke it as follows:<br>
<br>
xxx@rs1:~# sudo -u www-data /usr/bin/sudo /srv/birdseye/bin/birdc -2 -s<br>
/var/run/bird/bird-rs1-lan1-ipv4.ctl "show status"<br>
BIRD 2.0.9 ready.<br>
Access restricted<br>
BIRD 2.0.9<br>
Router ID is 192.0.2.4<br>
Hostname is rs1<br>
Current server time is 2024-01-26 09:16:51<br>
Last reboot on 2023-06-10 12:06:06<br>
Last reconfiguration on 2024-01-18 12:40:06<br>
Daemon is up and running<br>
<br>
<br>
And if not, that should allow you to diagnose the problem.<br>
<br>
Hth,<br>
- Barry<br>
<br>
<br>
> I am running Ubuntu 20.04 and Bird 2.0.7. Let me know any other<br>
> information that is needed. I've confirmed my subdomains match the .env<br>
> files, and the .env files have the appropriate birdc and socket paths.<br>
><br>
> Thank you,<br>
><br>
><br>
> Austin Davis<br>
><br>
><br>
> _______________________________________________<br>
> INEX IXP Manager mailing list<br>
> ixpmanager@inex.ie<br>
> Unsubscribe or change options here: <a href="https://www.inex.ie/mailman/listinfo/ixpmanager" id="OWAd42605c9-ff95-9850-7ca3-612f2553e26a" class="OWAAutoLink" data-auth="NotApplicable" data-loopstyle="linkonly">
https://www.inex.ie/mailman/listinfo/ixpmanager</a><br>
><br>
<br>
<br>
--<br>
<br>
Kind regards,<br>
Barry O'Donovan<br>
INEX Operations<br>
<br>
<a href="https://www.inex.ie/support/" id="OWA082775be-5885-7662-c5d4-3a8506b13fb4" class="OWAAutoLink" data-auth="NotApplicable" data-loopstyle="linkonly">https://www.inex.ie/support/</a><br>
+353 1 531 3339<br>
<br>
<br>
_______________________________________________<br>
INEX IXP Manager mailing list<br>
ixpmanager@inex.ie<br>
Unsubscribe or change options here: <a href="https://www.inex.ie/mailman/listinfo/ixpmanager" id="OWA42c686db-2c09-3255-9dba-b85a0d194ea6" class="OWAAutoLink" data-auth="NotApplicable" data-loopstyle="linkonly">
https://www.inex.ie/mailman/listinfo/ixpmanager</a><br>
<br>
<br>
</span></div>
</body>
</html>