[Fedora-directory-users] Sudo and Ldap

Kashif Ali snake007uk at gmail.com
Tue Sep 9 20:54:51 UTC 2008


when you say add sudo base? are you talking about ldif file?

Is there no way to continue to use the original ldif file?


2008/9/9 Malcolm Amir Hussain-Gambles <malcolm at saafinternational.com>

> Redhat sudo doesn't support ldap, recompile it with ldap support and add
> the sudoers base to /etc/ldap.conf and it should work then, annoying!
>
> Cheers
>
> Malcolm
>
> On Tue, 2008-09-09 at 21:39 +0100, Kashif Ali wrote:
> > Hello all,
> >
> > I have successfully setup FDS on Centos 5.2, and manage to get users
> > signing on without any issues. However if I edit the sudoers file to
> > allow a group on ldap use sudo, the sudo command does not see the
> > members of the group or I think the group itself?
> >
> > I have no idea why this is:
> >
> > if I run the command 'id' as the given user you can clear see the
> > group memberships, however if I do: getent group linuxops I see:
> >
> > linuxops:*:6000:
> >
> > with no members??? however SSHD AllowGroups works? I have configured
> > sshd to only allow members of the linxops group to login and this
> > works fine? so my question is why is sudo behaving differently?
> >
> > --
> > Fedora-directory-users mailing list
> > Fedora-directory-users at redhat.com
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20080909/9485bbe1/attachment.htm>


More information about the Fedora-directory-users mailing list