Hi,
As announced last month, I have just finished deploying the change in the PAM configuration requiring a special password to authenticate with sudo on all of torproject.org servers.
Preliminary tests do not show any problems, but it's possible you might have trouble running jobs with sudo if there's a configuration problem.
Again, that password can be changed in the web interface here:
https://db.torproject.org/login.html
For all the details, see the original announcement:
https://lists.torproject.org/pipermail/tor-project/2019-September/002509.htm...
... also included below.
A.
I forgot to mention, in the announcement, that sudo password changes are not instantaneous: they can take between 5 to 8 minutes to propagate to any given host.
More specifically, the password files are generated on the master LDAP server every five minutes, starting at the third minute of the hour, with a cron schedule like this:
3,8,13,18,23,28,33,38,43,48,53,58
Then those files are synchronized on a more standard 5 minutes schedule to all hosts.
There are also delays involved in the mail loop, of course.
Sorry if this wasn't made clearer up front. Don't hesitate to reach out on IRC or by email if there are any further problems.
A.
tor-project@lists.torproject.org
-
Antoine Beaupré