Forum Discussion

Tim_Schmeling_3's avatar
Tim_Schmeling_3
Icon for Nimbostratus rankNimbostratus
Mar 29, 2017

sudo isn't installed

Hi all,

 

i like to execute a script via sudo, but there isn't sudo installed on my BIG-IP 3900 Box (BIG-IP v12.1.1 (Build 1.0.196)). I'm confused about it, because on my trial version (BIG-IP v12.1.1 (Build 1.0.196)), sudo ist still installed and works as expected.

 

Can someone tell me, why there is a difference between my two environments? I get my 3900 Box with version 11.xx installed and do some updates up to the version mentioned above. Is this the root-cause why sudo isn't installed?

 

Is it possible to install the sudo package on my 3900 Box? If yes, where do i get the right package and do i lost support if i install the package manually?

 

I only found the following article about this topic: https://support.f5.com/csp/article/K519

 

Greets

 

Tim

 

application delivery
BIG-IP
  • Leonardo_Souza's avatar
    Leonardo_Souza
    Icon for Cirrocumulus rankCirrocumulus
    Mar 29, 2017

    The article is about v4, very old version. Definitely, not helpful for the version you are talking about.

    As you can see in this output, sudo still available in the latest version (13.0.0):

    [root@LABBIGIP1:INOPERATIVE:Disconnected] config  switchboot -l | head -n 3

Current boot image:
    HD1.10 - title BIG-IP 13.0.0 Build 0.0.1645
[root@LABBIGIP1:INOPERATIVE:Disconnected] config  sudo
usage: sudo [-D level] -h | -K | -k | -V
usage: sudo -v [-AknS] [-D level] [-g groupname|gid] [-p prompt] [-u user name|uid]
usage: sudo -l[l] [-AknS] [-D level] [-g groupname|gid] [-p prompt] [-U user name] [-u user name|uid] [-g groupname|gid] [command]
usage: sudo [-AbEHknPS] [-r role] [-t type] [-C fd] [-D level] [-g groupname|gid] [-p prompt] [-u user name|uid] [-g groupname|gid] [VAR=value] [-i|-s] []
usage: sudo -e [-AknS] [-r role] [-t type] [-C fd] [-D level] [-g groupname|gid] [-p prompt] [-u user name|uid] file ...
[root@LABBIGIP1:INOPERATIVE:Disconnected] config

    Can you provide the output of the CLI prompt and result when you run the sudo command?

    F5 uses CentOS Linux, so you can install RPM packages. F5 does not provide RPM packages, and the recommendation is to perform the F5 software installation, and that will install all required RPM packages.

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Mar 29, 2017

    Hi,

    I Never used sudo on bigip shell... I did not know it is included.

    which account do you use to try sudo? is it configured with 

    Advanced shell
    or 
    tmsh
    .

    if the user is defined with 

    tmsh
    Terminal Access, execute 
    bash
    to change shell to bash. then try again.

  • Leonardo_Souza's avatar
    Leonardo_Souza
    Icon for Cirrocumulus rankCirrocumulus
    Mar 29, 2017

    Well, I was hoping for you to be using the tmsh. Not sure why you need sudo, but let me start with your main problem.

    I just tested a few more versions, 12.1.1 has sudo. In 11.3.0 there is no sudo command, neither 10.2.4. Stanislas in his post said there is no sudo in 11.5.4.

    I can guess it was added somewhere in 11.6.X or v12. What version are you testing the sudo command? In your post you only mention 12.1.1.

    Second question is why you need sudo?

    [test@LABBIGIP2:ModuleNotLicensed:Active:Disconnected] ~  switchboot -l | head -n3

Current boot image:
    HD1.5 - title BIG-IP 11.3.0 Build 2806.0
[test@LABBIGIP2:ModuleNotLicensed:Active:Disconnected] ~  cat /etc/passwd | egrep "^root|test"
root:x:0:0:root:/root:/bin/bash
test:x:0:500:test:/home/test:/bin/bash
[test@LABBIGIP2:ModuleNotLicensed:Active:Disconnected] ~

    As you can see from the output above, a user (test in this example) with advanced shell has the same ID as root. So, basically has the same access as root. Unless you want the script to run with another user that is root, sudo is not necessary.