RE: Sudo and Ldap

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Kashif,

Make sure you have defined the group in ldap and added the posix attributes and object class to the group.  At a bare minimum, you’ll need the top, groupofuniquenames and posixgroup objecclassess.

 

Aaron

 

From: fedora-directory-users-bounces@xxxxxxxxxx [mailto:fedora-directory-users-bounces@xxxxxxxxxx] On Behalf Of Kashif Ali
Sent: Tuesday, September 09, 2008 4:39 PM
To: Fedora-directory-users@xxxxxxxxxx
Subject: Sudo and Ldap

 

Hello all,

I have successfully setup FDS on Centos 5.2, and manage to get users signing on without any issues. However if I edit the sudoers file to allow a group on ldap use sudo, the sudo command does not see the members of the group or I think the group itself?

I have no idea why this is:

if I run the command 'id' as the given user you can clear see the group memberships, however if I do: getent group linuxops I see:

linuxops:*:6000:

with no members??? however SSHD AllowGroups works? I have configured sshd to only allow members of the linxops group to login and this works fine? so my question is why is sudo behaving differently?

--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users

[Index of Archives]     [Fedora Directory Users]     [Fedora Directory Devel]     [Fedora Announce]     [Fedora Legacy Announce]     [Kernel]     [Fedora Legacy]     [Share Photos]     [Fedora Desktop]     [PAM]     [Red Hat Watch]     [Red Hat Development]     [Big List of Linux Books]     [Gimp]     [Yosemite News]

  Powered by Linux