i want to limit acces to my linux machine so i used sudo


i opened a ssh session on linux machine and i wanted to execute this commande:"sudo sh script.sh "remotly (ssh)
but it doesn't work.
this commande work on the same machine and i have all rights to execute it (i tested it locally)

That's a little confusing.

You are doing ssh from first server to remote server THEN doing sudo sh script.sh" on the remote?

First off that would require you to setup sudoers on the remote host to do "sh script.sh" on the remote host.
1) If sh or script.sh aren't in the directory you expect it will fail.
2) Why do "sh script.sh" at all - modify the script so that it has the shell interpreter line:
#!/bin/sh
That way it will know to run as shell - you then setup sudo to just run "sudo script.sh" instead of "sudo sh script.sh" which is less dangerous anyway - giving someone "sudo sh" is the equivalent of giving them the root password.
3) Since script.sh is script be DARN sure that it is ONLY writable and executable by root. Otherwise some other user could modify it to do something like "su -" so that when you do "sudo script.sh" it gives them a root prompt.

Lastly: You need to give the command line and the error you are seeing. "It doesn't work." isn't very helpful in troubleshooting.

Thanks for your help
you have say:
First off that would require you to setup sudoers on the remote host to do "sh script.sh" on the remote host.

Here is my problem because en local sudo sh script.sh work but with remote host doesn't.

how i can add in the file suoders this accees to remote host?


Thanks.

You have to ssh into the remote host so you have prompt there.

You can ssh to it either as root or ssh as another user then su (not sudo) to root on the remote. Once you are root on the remote you'd have to run visudo to edit the sudoers file there.

You can use the sudoers file on your local machine to figure out the correct entry for the sudoers on the remote.

If you don't already have root access to the root you can not do the above. You'd need to get whoever does have root access on the remote to add you to the sudoers there.

I have a connexion SSH and in my sudoers file i give to user1 the role root. i tried it local with:
user1@localhost sudo sh script.sh and it execute the script(of iptables) becuase i give to user1 the role of root.

So i didn't untersand why in remote machin does not work???

can you give me an example how to offer to user1 of remote machine with adress 132.124.32.3 to access do execute the script.sh in suoders file?

Perhaps my file is false.
here is my file:
# User alias specification
User_Alias ADMIN_AUTO_FIRE= X,Y
# Cmnd alias specification
Cmnd_Alias NET=/sbin/iptables,/usr/bin/dos2unix,/bin/chmod,/usr/bin/who,/bin/sh,/bin/,/bin/bash
# Defaults specification
# User privilege specification
root ALL=(ALL) ALL
ADMIN_AUTO_FIRE ALL=(ALL) NOPASSWD:NET