I am trying to compile some sources using a makefile. In the makefile there is a bunch of commands that need to be ran as sudo.

When I compile the sources from a terminal all goes fine and the make is paused the first time a sudo command is ran waiting for password. Once I type in the password, make resumes and completes.

But I would like to be able to compile the sources in NetBeans. So, I started a project and showed netbeans where to find the sources, but when I compile the project it gives the error:

sudo: no tty present and no askpass program specified

The first time it hits a sudo command.

I have looked up the issue on the internet and all the solutions I found point to one thing: disabling the password for this user. Since the user in question here is root. I do not want to do that.

Is there any other solution?

share|improve this question
2  
I am compiling a toy operating system. I need to do some stuff to setup the VM, including creating a virtual hdd with boot sector. – hebbo Feb 9 '14 at 13:44
    
See also stackoverflow.com/q/20248009/873282 – koppor Sep 16 '15 at 23:55
    
As pointed in serverfault.com/a/597268, sudo -n my-command worked for me. HIH! – Andreyev Dias de Melo Jul 1 '17 at 21:12

17 Answers 17

Granting the user to use that command without prompting for password should resolve the problem. First open a shell console and type:

sudo visudo

Then edit that file to add to the very end:

username ALL = NOPASSWD: /fullpath/to/command, /fullpath/to/othercommand

eg

john ALL = NOPASSWD: /sbin/poweroff, /sbin/start, /sbin/stop

will allow user 'john' to sudo poweroff, start and stop without being prompted for password.

Look at the bottom of the screen for the keystrokes you need to use in visudo - this is not vi by the way - and exit without saving at the first sign of any problem. Health warning: corrupting this file will have serious consequences, edit with care!

share|improve this answer
2  
Yes, the sudoers man page has opened my eyes to how sudo is actually supposed to be used. – Spencer Williams Apr 30 '15 at 4:36
3  
visudo should open up in whatever EDITOR your environment is configured to use, which very well could be (and should be ^_^) vi. – Matt Styles May 29 '15 at 22:59
1  
Make sure the NOPASSWD mathing line is AFTER any other sudo lines that may match (like %wheel) that does not have the NOPASSWD flag. – anthony Jan 28 '16 at 7:01
13  
i can't "sudo visudo" because I can't sudo in the first place! – Gubatron Sep 23 '16 at 6:46
2  
Consider adding a file to /etc/sudoers.d and leaving the visudo file untouched. – xlttj Mar 1 '17 at 9:58

Try:

  1. Use NOPASSWD line for all commands, I mean:

    jenkins ALL=(ALL) NOPASSWD: ALL
    
  2. Put the line after all other lines in the sudoers file.

That worked for me (Ubuntu 14.04).

share|improve this answer
9  
I first added the line after other user configurations, but it only worked when placed as absolutely last line in file on lubuntu 14.04.1. – user77115 Feb 24 '15 at 8:01
    
The second part was the solution I was what I was needing. A existing configuration line (for wheel group) also matched my sudo command but without the NOPASSWD: entry. Placing my new line after it gave it the priority, allowing no password use for the specific command I needed. – anthony Jan 28 '16 at 6:58
2  
As @user77115 had mentioned, this only worked if you placed it as the last line in the sudoers file, even with Ubuntu 16.04. As a side note, giving sudo permissions to jenkins for all commands is a pretty large security concern. Consider wrapping your jenkins scripts and only giving access to specific commands such as: jenkins ALL=(ALL) NOPASSWD: /var/lib/jenkins/wrapper_script – ivandov Jun 15 '16 at 20:30
    
Putting the line at the end work. why I don't know. – Kishor Pawar Jul 13 '16 at 9:17
    
jenkins is just a user name? It must be user name of user from host machine? What if user name on host machine matches user name from remote server? – mrgloom May 2 '17 at 14:28

Try:

ssh -t remotehost "sudo <cmd>"

This will remove the above errors.

share|improve this answer
3  
-t Force pseudo-tty allocation. This can be used to execute arbitrary screen-based programs on a remote machine see also: sudo-no-tty-present-and-no-askpass-program-specified Also sudo -A allows setting a sudo askpass program, but I only see GUIs. Does anyone one know an askpass to allow ssh remotehost sudo -A askpass ? – here Apr 12 '14 at 7:15
1  
Correction, The -A for sudo does not take arguments and instead requires environment SUDO_ASKPASS or a sudo.conf So ssh remotehost sudo -A command would still work. Still curious about a terminal based askpass program. – here Apr 12 '14 at 9:57
3  
this doesn't work for me (presumably because I'm calling ssh from a script), giving me the error Pseudo-terminal will not be allocated because stdin is not a terminal. :( – knocte Jul 17 '16 at 10:02
    
Works great for me. Thanks! – xfra35 Jan 6 '17 at 15:19
    
This does not answer the question. – bschlueter Dec 2 '17 at 23:41

After all alternatives, i found that

sudo -S true

is the quickest answer, but i don't know why.

share|improve this answer
    
This seems fixing my issue. But is there any side effect by using this command? – Xiaodong Qi Oct 10 '16 at 19:39
2  
sudo -S <command>- true just happens to be a dummy command that returns an exit code of 0 (false is a command that returns 1). Thank you, this is the one true answer, since all others expect "sudo" to work! – Adam Plocher Oct 23 '16 at 16:44
    
-S: Write the prompt to the standard error and read the password from the standard input instead of using the terminal device. The password must be followed by a newline character. – fileinster Mar 29 '17 at 19:44
    
See: stackoverflow.com/a/22651598/1041319 – arntg Jun 5 '17 at 22:19
    
This works right away, and might get sudo working until a timeout, but doesn't address whatever underlying problems might exist, and the problem can come back. – nealmcb Sep 10 '17 at 14:00

sudo by default will read the password from the attached terminal. Your problem is that there is no terminal attached when it is run from the netbeans console. So you have to use an alternative way to enter the password: that is called the askpass program.

The askpass program is not a particular program, but any program that can ask for a password. For example in my system x11-ssh-askpass works fine.

In order to do that you have to specify what program to use, either with the environment variable SUDO_ASKPASS or in the sudo.conf file (see man sudo for details).

You can force sudo to use the askpass program by using the option -A. By default it will use it only if there is not an attached terminal.

share|improve this answer
    
Current solution requires a gui. What askpass program works on terminal. – here Apr 12 '14 at 7:19
    
@here: Well... if you run ssh from a terminal, it will ask for a password directly, you don't need anything special... Or are you asking about requesting the password from a different terminal than the one that will run the ssh session? – rodrigo Apr 12 '14 at 9:27
1  
ahh now I see that -A does not take arguments. -A requires environment SUDO_ASKPASS or a sudo.conf file. In that case, ssh host "export SUDO_ASKPASS=askpass;sudo -A cat /etc/passwd" would still work with a terminal based askpass, however @chandru is far more concise below with ssh -t ... – here Apr 12 '14 at 9:53

Try this one:

echo '' | sudo -S my_command
share|improve this answer
    
It works for me, but can anyone explain why it helps? – ololobus May 17 '16 at 20:26
    
@ololobus you send an empty password to first prompt to enter password – Nikita Koksharov Jun 23 '16 at 10:49
    
Worked! None of the higher rated answer solved it for me. – user14042 Apr 21 '17 at 4:36

If by any chance you came here because you can't sudo inside the Ubuntu that comes with Windows10

  1. Edit the /etc/hosts file from Windows (with Notepad), it'll be located at: %localappdata\lxss\rootfs\etc, add 127.0.0.1 WINDOWS8, this will get rid of the first error that it can't find the host.

  2. To get rid of the no tty present error, always do sudo -S <command>

share|improve this answer
2  
Thanks for providing an answer for people who came here for a reason unrelated to question description, but matching question title. +1 – Jayant Bhawal Nov 12 '16 at 17:05
2  

Login into your linux. Fire following commands. Be careful, as editing sudoer is a risky proposition.

$ sudo visudo

Once vi editor opens make the following changes:

  1. Comment out Defaults requiretty

    # Defaults    requiretty
    
  2. Go to the end of the file and add

    jenkins ALL=(ALL) NOPASSWD: ALL
    
share|improve this answer

Make sure the command you're sudoing is part of your PATH.

If you have a single (or multi, but not ALL) command sudoers entry, you'll get the sudo: no tty present and no askpass program specified when the command is not part of your path (and the full path is not specified).

You can fix it by either adding the command to your PATH or invoking it with an absolute path, i.e.

sudo /usr/sbin/ipset

Instead of

sudo ipset

share|improve this answer
1  
This is actually forked for me. in sudoers %sitd ALL=(lamparna) NOPASSWD: /usr/bin/git_push_to_lamparna.sh, /usr/bin/git and using sudo -u lamparna git push --mirror ssh://lamparna@REDMINE/home/lamparna/repos/git/jine/lamparna‌​.git in git post-update hook return no tty, but using sudo -u lamparna /usr/bin/git push --mirror ssh://lamparna@REDMINE/home/lamparna/repos/git/jine/lamparna‌​.git work without password. – Foton Sep 16 '15 at 7:16

For Ubuntu 16.04 users

There is a file you have to read with:

cat /etc/sudoers.d/README

Placing a file with mode 0440 in /etc/sudoers.d/myuser with following content:

myuser  ALL=(ALL) NOPASSWD: ALL

Should fix the issue.

Do not forget to:

chmod 0440 /etc/sudoers.d/myuser
share|improve this answer
    
Nice. Cleaner solution than the popular one. – Paul Praet Oct 1 '17 at 8:35

In Jenkins:

echo '<your-password>' | sudo -S command

Eg:-

echo '******' | sudo -S service nginx restart

You can use Mask Password Plugin to hide your password

share|improve this answer
    
This combination was exactly what I needed, many thanks!! – Marius B Oct 10 '17 at 13:30

Command sudo fails as it is trying to prompt on root password and there is no pseudo-tty allocated (as it's part of the script).

You need to either log-in as root to run this command or set-up the following rules in your /etc/sudoers (or: sudo visudo):

# Members of the admin group may gain root privileges.
%admin  ALL=(ALL) NOPASSWD:ALL

Then make sure that your user belongs to admin group (or wheel).

Ideally (safer) it would be to limit root privileges only to specific commands which can be specified as %admin ALL=(ALL) NOPASSWD:/path/to/program

share|improve this answer
    
I know, that's much safer way to do. Although, I wrote the following command in sudoers file apache ALL = (ALL) NOPASSWD:/usr/share/apache-tomcat-7.0.61/bin/startup.sh but it doesn't work for me. it gives the following error sudo: >>> /etc/sudoers: syntax error near line 120 <<< sudo: parse error in /etc/sudoers near line 120 sudo: no valid sudoers sources found, quitting sudo: unable to initialize policy plugin – muaaz Jun 13 '15 at 10:57
1  
BTW, it works well apache ALL=(ALL) NOPASSWD: ALL but a security risk. :) – muaaz Jun 13 '15 at 10:58

This error may also arise when you are trying to run a terminal command (that requires root password) from some non-shell script, eg sudo ls (in backticks) from a Ruby program. In this case, you can use Expect utility (http://en.wikipedia.org/wiki/Expect) or its alternatives.
For example, in Ruby to execute sudo ls without getting sudo: no tty present and no askpass program specified, you can run this:

require 'ruby_expect'

exp = RubyExpect::Expect.spawn('sudo ls', :debug => true)
exp.procedure do
    each do
        expect "[sudo] password for _your_username_:" do
            send _your_password_
        end
    end
end

[this uses one of the alternatives to Expect TCL extension: ruby_expect gem].

share|improve this answer

For the reference, in case someone else encounter the same issue, I was stuck during a good hour with this error which should not happen since I was using the NOPASSWD parameter.

What I did NOT know was that sudo may raise the exact same error message when there is no tty and the command the user try to launch is not part of the allowed command in the /etc/sudoers file.

Here a simplified example of my file content with my issue:

bguser ALL = NOPASSWD: \
    command_a arg_a, \
    command_b arg_b \
    command_c arg_c

When bguser will try to launch "sudo command_b arg_b" without any tty (bguser being used for some daemon), then he will encounter the error "no tty present and no askpass program specified".

Why?

Because a comma is missing at the end of line in the /etc/sudoers file...

(I even wonder if this is an expected behavior and not a bug in sudo since the correct error message for such case shoud be "Sorry, user bguser is not allowed to execute etc.")

share|improve this answer

I was getting this error because I had limited my user to only a single executable 'systemctl' and had misconfigured the visudo file.

Here's what I had:

jenkins ALL=NOPASSWD: systemctl

However, you need to include the full path to the executable, even if it is on your path by default, for example:

jenkins ALL=NOPASSWD: /bin/systemctl

This allows my jenkins user to restart services but not have full root access

share|improve this answer

No one told what could cause this error, in case of migration from one host to another, remember about checking hostname in sudoers file:

So this is my /etc/sudoers config

User_Alias      POWERUSER = user_name
Cmnd_Alias SKILL = /root/bin/sudo_auth_wrapper.sh
POWERUSER hostname=(root:root) NOPASSWD: SKILL

if it doesn't match

uname -a
Linux other_hostname 3.10.17 #1 SMP Wed Oct 23 16:28:33 CDT 2013 x86_64 Intel(R) Core(TM) i3-4130T CPU @ 2.90GHz GenuineIntel GNU/Linux

it will pop up this error:

no tty present and no askpass program specified

share|improve this answer

Other options, not based on NOPASSWD:

  • Start Netbeans with root privilege ((sudo netbeans) or similar) which will presumably fork the build process with root and thus sudo will automatically succeed.
  • Make the operations you need to do suexec -- make them owned by root, and set mode to 4755. (This will of course let any user on the machine run them.) That way, they don't need sudo at all.
  • Creating virtual hard disk files with bootsectors shouldn't need sudo at all. Files are just files, and bootsectors are just data. Even the virtual machine shouldn't necessarily need root, unless you do advanced device forwarding.
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.