On Fri, 2015-10-30 at 14:29 +0200, Todor Petkov wrote:
Hello all,
I have the following setup:
389-ds server and various machines are configured to retrieve user
information via SSSD.
There is an user in the ldap server, called userx. This user is used
by
HP UCMDB to log in machines and perform discovery of installed
packages,
settings etc.
Due to the nature of the HP product, it requires passwordless sudo.
As I read, there is no way for ldap user to be added in sudoers file
vith NOPASSWD option, is this correct?
There is no reason you can't add NOPASSWD to a user in sudoers
regardless of if they are resolved from ldap, sssd, or local.
Alternatelly, you can add NOPASSWD to a group, and make the ldap user a
member of the group.
--
Sincerely,
William Brown
Software Engineer
Red Hat, Brisbane