It looks like one of you pam files (most likely system-auth-ac or password-auth-ac) have pam_pwquality.so in it and that does not seem to be loaded on the server. Check that out.
On Friday, October 5, 2018 at 2:14:43 AM UTC-4, Rajendra Rawat wrote: > > Hi Kai, > > Output: ansible xyz.com -a id > xyz.com | SUCCESS | rc=0 >> > uid=10102(rajrawat) gid=59968(oinstall) groups=59968(oinstall),10(wheel) > > > /etc/log/secure file contents: > > Oct 4 23:09:18 xyz sshd[12957]: pam_unix(sshd:session): session opened > for user rajrawat by (uid=0) > Oct 4 23:09:22 xyz sudo: PAM unable to > dlopen(/usr/lib/security/pam_pwquality.so): > /usr/lib/security/pam_pwquality.so: cannot open shared object file: No such > file or directory > Oct 4 23:09:22 xyz sudo: PAM adding faulty module: > /usr/lib/security/pam_pwquality.so > > Kindly suggest on what could be the problem. > > Thanks & Regards > > Rajendra Rawat > > > On Thu, 4 Oct 2018 at 15:56, Kai Stian Olstad <[email protected] > <javascript:>> wrote: > >> On 04.10.2018 11:47, Rajendra Rawat wrote: >> > I have ran the playbook with -vvvv option. >> >> Bassed on the output i still thing something is missing with the sudoers >> configuration, you need to check logs and configuration. >> >> This will print the groups your user is a member off >> ansible xyz.com -a id >> >> You should also check the auth/secure log in /var/log/ (I think the file >> is called secure in RHEL realm) it should have some information about >> why user is denied sudo access. >> >> -- >> Kai Stian Olstad >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Ansible Project" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> To post to this group, send email to [email protected] >> <javascript:>. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/ansible-project/80db9a8b389e990d505c10dee19c7bb9%40olstad.com >> . >> For more options, visit https://groups.google.com/d/optout. >> > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/2648367f-a389-4e6a-9218-368665b27c00%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
