Kashif, Make sure you have defined the group in ldap and added the posix attributes and object class to the group. At a bare minimum, you'll need the top, groupofuniquenames and posixgroup objecclassess. Aaron From: fedora-directory-users-bounces at redhat.com [mailto:fedora-directory-users-bounces at redhat.com] On Behalf Of Kashif Ali Sent: Tuesday, September 09, 2008 4:39 PM To: Fedora-directory-users at redhat.com Subject: Sudo and Ldap Hello all, I have successfully setup FDS on Centos 5.2, and manage to get users signing on without any issues. However if I edit the sudoers file to allow a group on ldap use sudo, the sudo command does not see the members of the group or I think the group itself? I have no idea why this is: if I run the command 'id' as the given user you can clear see the group memberships, however if I do: getent group linuxops I see: linuxops:*:6000: with no members??? however SSHD AllowGroups works? I have configured sshd to only allow members of the linxops group to login and this works fine? so my question is why is sudo behaving differently? -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.fedoraproject.org/pipermail/389-users/attachments/20080909/e6b97458/attachment.html