Sudo and Ldap

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



This is how I've always done it:

I usually just pull the src.rpm and add ldap in the .spec file,
recompile then I can add it to standard build image / kickstart

Then add something like:
sudoers_base   ou=SUDOers,dc=example,dc=com

to /etc/ldap.conf and that should be it


Cheers,

Malcolm

On Tue, 2008-09-09 at 21:54 +0100, Kashif Ali wrote:
> when you say add sudo base? are you talking about ldif file?
> 
> Is there no way to continue to use the original ldif file?
> 
> 
> 2008/9/9 Malcolm Amir Hussain-Gambles <malcolm at saafinternational.com>
>         Redhat sudo doesn't support ldap, recompile it with ldap
>         support and add
>         the sudoers base to /etc/ldap.conf and it should work then,
>         annoying!
>         
>         Cheers
>         
>         Malcolm
>         
>         
>         On Tue, 2008-09-09 at 21:39 +0100, Kashif Ali wrote:
>         > Hello all,
>         >
>         > I have successfully setup FDS on Centos 5.2, and manage to
>         get users
>         > signing on without any issues. However if I edit the sudoers
>         file to
>         > allow a group on ldap use sudo, the sudo command does not
>         see the
>         > members of the group or I think the group itself?
>         >
>         > I have no idea why this is:
>         >
>         > if I run the command 'id' as the given user you can clear
>         see the
>         > group memberships, however if I do: getent group linuxops I
>         see:
>         >
>         > linuxops:*:6000:
>         >
>         > with no members??? however SSHD AllowGroups works? I have
>         configured
>         > sshd to only allow members of the linxops group to login and
>         this
>         > works fine? so my question is why is sudo behaving
>         differently?
>         >
>         
>         > --
>         > Fedora-directory-users mailing list
>         > Fedora-directory-users at redhat.com
>         >
>         https://www.redhat.com/mailman/listinfo/fedora-directory-users
>         
>         --
>         Fedora-directory-users mailing list
>         Fedora-directory-users at redhat.com
>         https://www.redhat.com/mailman/listinfo/fedora-directory-users
> 
> 
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users




[Index of Archives]     [Fedora User Discussion]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora News]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora QA]     [Fedora Triage]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Yosemite Photos]     [Linux Apps]     [Maemo Users]     [Gnome Users]     [KDE Users]     [Fedora Tools]     [Fedora Art]     [Fedora Docs]     [Maemo Users]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Fedora ARM]

  Powered by Linux