Hi All So im shutting down pfsense via a rule. I’ve installed the cron package on pfsense which allows a command to be run without a password, this works fine. I also used the ssh key gen to setup pub/private keys, so ssh user@192.168.1.254 also works fine from openhab My rule below fails though,…

yes , under visudo openhab ALL=(ALL) NOPASSWD: ALL

[image] dastrix80: prints nothing im afraid. As said, that suggests your rule may not be running. Why not find out? rule "Shutdown Firewall" when Item shutdownfirewall changed to ON then logInfo("exectest", "rule triggered") ... Thinking on it, another possibility for failing…

[image] dastrix80: var result = executeCommandLine(“sudo ssh@@nsautomate@192.168.1.254@@sudo@@/etc/rc.halt”) thanks rossko, now I get this 19:54:19.089 [INFO ] [lipse.smarthome.model.script.exectest] - results- sudo: sorry, you must have a tty to run sudo edit: turn of requiretty in the v…

I’ve no idea, but wanting a tty suggests to me that the underlying reason is that it wants a password.

which is odd given visudo is correct

You seem to have been around a lot of this area before. This is sort of related, regarding two sudo for different users. [image] [SOLVED] Openhab 2 and executeCommandLine / Exec Scripts & Rules You are missing a sudo. The sudo -u openhab part of the line runs…

Yeah this is different in that im executing a command as openhab, but logging in as another user. This is non interactive. Different to the example in the link youve posted

Why do you run the ssh command using sudo (sudo ssh ....)? There should be no need to do so. The ssh client is executed on your local openHab node, not on the pfsense node. When generating the private/pub keys, were you logged in as user openhab?

[image] ei_Gelb_Geek: sudo ssh-keygen -t rsa sudo ssh-copy-id -i /root/.ssh/id_rsa.pub kris@192.168.1.254 Unless you run openHAB as user root (which you shouldn’t), this will not work. Normally, openHab will run as user openhab so you will need to generate the private/public key pair as user…

The way works … because root has the ssh-keys & user openhab have access to sudo

Shutting down a firewall remotely via a password less script

Setup, Configuration and Use Scripts & Rules

rossko57 (Rossko57) August 4, 2019, 10:21am 15

You seem to have been around a lot of this area before. This is sort of related, regarding two sudo for different users.