Script cannot read password

Question

Python script is designed to run with elevated credentials, unfortunately

it still prompts me for password
when I enter the correct password it doesn't work

Here is script1, which calls script2 with elevated credentials

import os
import sys, subprocess, socket, string
import wmi, win32api, win32con
import win32com.shell.shell as sh   

ASADMIN = '/user:DOMAIN\username'
os.system('"runas /user:DOMAIN\username "D:/Python27/python.exe script2.py sender-ip=10.10.10.10 < password.txt""')
sys.exit(0)

if sys.argv[-1] != ASADMIN:
    script = os.path.abspath(sys.argv[0])
    params = ''.join([ASADMIN] + ['D:\Python27\python.exe',script] + sys.argv[1:])
    sh.ShellExecuteEx(lpVerb='runas',lpFile=sys.executable,lpParameters=params)
    sys.exit(0)

Here is script2

import sys, subprocess, socket, string import wmi, win32api, win32con

for args in [item.strip('sender-ip=') for item in sys.argv[1:]]:

userIP = args
userloggedon = ""

# perform system lookup of IP address
userIP = "\\\\" + userIP

pst = subprocess.Popen(
        ["D:\pstools\psloggedon.exe", "-l", "-x",  userIP],
        stdout = subprocess.PIPE,
        stderr = subprocess.PIPE
    )

out, error = pst.communicate()

userLoggedOn = out.split('\n')[1].strip()
print 'userId={}'.format(userLoggedOn)
f = open('D:\SymantecDLP\Protect\plugins\output.txt', 'w')
f.write('userId={}'.format(userLoggedOn))

output.txt is not created

Any ideas?

EDIT

I also read this thread, How to supply password to runas command when executing it from java

but no matter what I try I keep getting the error

Attempting to start c:\test.bat as user "DOMAIN\username" ...
RUNAS ERROR: Unable to run - c:\test.bat
1326: Logon failure: unknown user name or bad password.

After the 5th last line that is `out, error = pst.communicate()` — ρss, May 20 '14 at 18:55
He publicado una respuesta, pero si usted publica información sobre el error que se obtiene a partir de la ejecución de su código, se podría mejorar. — Raydel Miranda, May 20 '14 at 19:39

Raydel Miranda · Accepted Answer · 2014-05-21T12:13:53.543

1

Let's talk about your problems one at the time.

1. It still prompts me for password

In the line

os.system('"runas /user:DOMAIN\username "D:/Python27/python.exe script2.py sender-ip=10.10.10.10 < password.txt""')

you're providing the password to script2. runas command still need a password since is trying to run a program as another user.

2. When I enter the correct password it doesn't work

Well ... The code does'n work that's clear. But, you have to be more specific when asking a question. Right now a look to your code and I can see that you're trying to do ping on a remote machine.

Might the remote machine has a firewall? Have you tryed doing ping manually?

Edit: The output.txt file is not created, and running the script don't tell you nothing about error writting the file, obviously your code is hitting one of the sys.exit() lines.

edited May 21 '14 at 12:13

answered May 20 '14 at 19:36

Raydel Miranda

13,825
3
38
60

The output.txt file is not created, and running the script don't tell you nothing about error writting the file, obviously your code is hitting one of the `sys.exit()` lines. – Raydel Miranda May 21 '14 at 12:14
I am able to ping the remote machine manually. When I manually open the command prompt using elevated credentials and run script2 it works perfectly. To simplify the question I changed script2 ... all machines are pingable – Glowie May 21 '14 at 12:28
to address point 1: how do I give the runas command the password. This is my problem. – Glowie May 21 '14 at 12:30
OK, thats another question. This question have been answered. I recommend you write a new question let's say `How do I provide the password automatically to the runas command?` – Raydel Miranda May 21 '14 at 13:44
please answer new question, http://stackoverflow.com/questions/23786511/unable-to-supply-password-to-runas-from-commandline – Glowie May 21 '14 at 14:42

score 0 · Answer 2 · answered Dec 28 '17 at 20:46

You can use PsExec https://learn.microsoft.com/en-us/sysinternals/downloads/psexec

You can supply a username and password and executing does not need to be elevated to admin:

psexec [\computer[,computer2[,...] | @file]]\ [-u user [-p psswd] [-n s][-r servicename][-h][-l][-s|-e][-x][-i [session]][-c [-f|-v]][-w directory][-d][-][-a n,n,...] cmd [arguments]

Use the -e switch to give the same results as Runas /netonly:

-e Does not load the specified account’s profile.

Script cannot read password

2 Answers2

Linked