SUSE Support

Here When You Need Us

Possible reasons for SUSE Manager to report "Access denied to UID postgres via sudo."

This document (7023801) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Manager 3.2

Situation

This error message has been observed in the following situations:

1. Running smdba returns:

susemanager:/root/ #smdba system-check autotuning --max_connections=400
Cannot parse line: root is not in the sudoers file. This incident will be reported.
Backend error:
               Access denied to UID "postgres" via sudo.

2. When migrating from PostgreSQL 9.6 to PostgreSQL 10 using /usr/lib/susemanager/bin/pg-migrate-96-to-10.sh, the script may exit with:

09:32:13   Tune new postgresql configuration...
Backend error:
        Access denied to UID "postgres" via sudo.

While monitoring the execution of smdba system-check autotuning --max_connection=400, the following errors are observed in strace:

25100 write(2, ">>> /etc/sudoers: Alias \"CONFIG_RHN\" already defined near line 90 <<<\n", 70) = 70
25100 write(2, "parse error in /etc/sudoers near line 90", 40 <unfinished ...>

Resolution

Please compare /etc/sudoers and /etc/sudoers.d/spacewalk for duplicate entries. The options activated in /etc/sudoers.d/spacewalk must not exist in /etc/sudoers.

This issue will most likely only occur on older SUSE Manager deployments (installed before spacewalk-config-2.8.5.4-3.7.1).

Cause


Additional Information


[...]
Fix /etc/sudoers.d/spacewalk file. (related to bsc#1099517) NOTE: In case there have been custom modifications to this file, it will be saved in /root/sudoers-spacewalk.save as sudo will fail on duplicate definitions
[...]

strace command to capture system calls for analysis:

strace -f -s 1024 -o /root/smdba.strace smdba system-check autotuning --max_connections=400

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

  • Document ID:7023801
  • Creation Date: 01-Apr-2019
  • Modified Date:03-Mar-2020
    • SUSE Manager

< Back to Support Search

For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback[at]suse.com

tick icon

SUSE Support Forums

Get your questions answered by experienced Sys Ops or interact with other SUSE community experts.

tick icon

Support Resources

Learn how to get the most from the technical support you receive with your SUSE Subscription, Premium Support, Academic Program, or Partner Program.

tick icon

Open an Incident

Open an incident with SUSE Technical Support, manage your subscriptions, download patches, or manage user access.