Re: migrate python script from sudo to doas

Markus Rosjat <rosjat@ghweb.de> wrote:
> hi all,
>
> I have some old python scripts that using os.spawnl to execute stuff
> like useradd  combined with sudo. This worked just fine on systems with
> sudo installed  but these days we have doas and its totally enough for
> things I use to do so I said to myself "lets update these old scripts
> ..." . In code this was basically replasing os.spawnl with
> subprocess.check_call  but when I run this the useradd command doesnt
> get executed by the script. On the cmd it does, so this works on cmd:
>
> doas useradd -u 666 -g =uid -s /sbin/nologin -d
> /var/mail/domain.tld/vmailuser0666 vmailuser0666
>
> but in the script I with the code like this:
>
>  exit = subprocess.check_call(['doas', 'useradd', '-u %s' % user_id,
> '-g =uid',
> '-s /sbin/nologin',
> '-d %s' % mb_parent_dir,
> user_name])
>
> I get an exception that seems to be related to the fact that doas isnt
> really working here
>
> doas: Authorization failed <- this comes from the script even the
> provided password is correct
>
> Traceback (most recent call last):
>   File "/root/scripts/mb_add", line 244, in <module>
>     mb_addresses)
>   File "/root/scripts/mb_add", line 174, in add_mailbox
>     user_name])
>   File "/usr/local/lib/python2.7/subprocess.py", line 190, in check_call
>     raise CalledProcessError(retcode, cmd)
> subprocess.CalledProcessError: Command '['doas', 'useradd', '-u 666',
> '-g =uid', '-s /sbin/nologin', '-d /var/mail/domain.tld/vmailuser666',
> 'vmailuser666']' returned non-zero exit status 1
>
> So does someone had some issues with migrating scripts from sudo to
> doas, then some help or hintw would be very appreciated.
>
>
> regards

hi

what openbsd version are you using?
did you try the command outside of python?

There were issues with doas a few days ago in snapshots.