54

I'm trying to setup sudo without no password but still I get prompted for password, I'm using ubuntu, here is the relevant line from the sudoers configuration file :

gandalf ALL=(ALL:ALL) NOPASSWD: ALL
6
  • 4
    cough Allowing a user to sudo without a password cough. UNSECURE! You should not do this.
    – Thomas Ward
    Jul 26, 2012 at 16:01
  • 1
    You can do this, but it breaks the security model. Are you absolutely sure you want to do this? Jul 26, 2012 at 16:26
  • 2
    I can understand wanting to do this on a computer, say at home in a secure situation. Security forces a "good" password, which usually means long and harder to type. Trouble is, we have to type it in VERY regularly and it gets to be tiresome. I am not advocating against security, but, especially in the home situation, it may well be desirable to do this.
    – Jazz
    Jul 26, 2012 at 22:44
  • 14
    To say this "breaks the security model" is rather extreme. sudo is designed to facilitate passwordless operation easily and even has ready-to-go commented configuration lines in /etc/sudoers to allow a whole group of users to run any command as root without being prompted for a password. There are some adverse security implications of doing this--any program can perform actions as root without you being notified!--but an actual attacker, with the ability to run programs as (non-root) you, can already capture your password as you enter it for sudo (and then run sudo with it). Jul 27, 2012 at 17:43
  • I was wanting to do this just for my ansible ci/cd user.. so that my management scripts can run unattended as part of my CI/CD process. I wouldn't say that's inherently insecure as it's for one user and only via ssh with a private/public key pair.
    – Tracker1
    Jul 10, 2014 at 21:16

3 Answers 3

57

I believe the correct line is:

gandalf ALL=(ALL) NOPASSWD: ALL

Put it in the end of the file - replace gandalf with the appropriate username. (To edit the file, run the command sudo visudo.)

4
  • 4
    Thanks, putting it at the end of the file fixed it for me
    – trinth
    Dec 19, 2013 at 17:26
  • 1
    Not working for me in ubuntu 16.04
    – Praytic
    Jul 3, 2016 at 14:43
  • You have to log out and in again @Praytic
    – LnxSlck
    Jul 7, 2016 at 22:05
  • 1
    Still nothing. Strange, because in 14.04 I had no problems with this approach.
    – Praytic
    Jul 10, 2016 at 10:44
16

I use the sudo group and have:

%sudo ALL=NOPASSWD: ALL
10

There is one note to mention. That line should be at end of the /etc/sudoers file.

Why: because some configuration lines from /etc/sudoers overwrite our line.

gandalf ALL=(ALL:ALL) NOPASSWD: ALL

Not the answer you're looking for? Browse other questions tagged or ask your own question.