Has anyone managed sudoers via FDS here? I have been trying to create LDAP entries as mentioned here: http://www.gratisoft.us/sudo/readme_ldap.html Which FDS will not allow me to do, even though the schemas for SUDO are in the server. Is there a walkthrough, or is there anyone that is managing SUDO via FDS here successfully?
Hello Jared,
I haven't tried this yet, but I'd be interested if you can post back to the list any more information if you do get sudo working with FDS. Can you be more specific on what steps you have taken, and where you are running into problems? The instructions on the page you linked look pretty good to me. You might want to check on the sudo-users mailing list archives for any tips. I would say doublecheck that you added the schema.iPlanet file to the schema - if it's giving you an objectclass violation error, then you probably either didn't install the schema properly, or are trying to add an element from the schema to an object that doesn't have that objectclass (e.g. you can't add a "sudoCommand" attribute to an object that doesn't have the "sudoRole" objectclass).
-- Christina Plummer
________________________________
From: fedora-directory-users-bounces@redhat.com [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Jared B. Griffith Sent: Thursday, February 07, 2008 5:30 PM To: fedora-directory-users Subject: [Fedora-directory-users] FDS Sudo Management
Has anyone managed sudoers via FDS here? I have been trying to create LDAP entries as mentioned here: http://www.gratisoft.us/sudo/readme_ldap.html Which FDS will not allow me to do, even though the schemas for SUDO are in the server. Is there a walkthrough, or is there anyone that is managing SUDO via FDS here successfully?
Jared B. Griffith wrote:
Has anyone managed sudoers via FDS here? I have been trying to create LDAP entries as mentioned here: http://www.gratisoft.us/sudo/readme_ldap.html Which FDS will not allow me to do, even though the schemas for SUDO are in the server. Is there a walkthrough, or is there anyone that is managing SUDO via FDS here successfully?
I have but it was in 2006, I have not documented it, this is what I remember from it:
I added 69sudoschema.ldif (see attached files) to the FDS and restarted it. Then I converted sudoers file with sudoers2ldif (and made some entries by hand).
For administration I have used phpldapadmin and sudoers.xml template.
I used RHEL4 and had to compile newer sudo (sudo-1.6.8p8-2.4.i686.rpm), original one did not support LDAP. I took that version from Fedora Core X and enabled LDAP support from spec file (see .patch file).
Regards, Kimmo
389-users@lists.fedoraproject.org