Hi,
we've configured ldap/sudo with sudo-rules living in LDAP.
cheers,
Andy
2011/4/29 JR Aquino <JR.Aquino(a)citrix.com>
> Hi all,
>
> Currently, we run SSSD on a RHEL5 update 4 box. SSSD version is 1.2.1.
For the main purpose we need it, caching credentials, it works like a charm.
> Now, we have a custom compiled sudo version (sudo 1.6) which does query
LDAP for the sudo rules.
>
> I was testing if sudo still worked while using cached credentials.
(Which is one of the requirements of the project, as users are not allowed
root access)
> and it did work. I simply pulled the network cable out of the network
interface, rebooted the machine, logged in with cached credentials and tried
a sudo su - (Which I am allowed to do). And it worked. Is this intended
behaviour, am I looking at the wrong things or did I discover a 'hidden
feature/anomaly'due to the custom sudo version ?
>
> I tried searching on sudo and sssd with google, I only read articles that
sudo and sssd are not integrated yet(but in the works), so I am wondering
how this works.
Are you using your local /etc/sudoers or have you installed and configured
FreeIPA/LDAP with Sudo entries living in the directory?
-JR
_______________________________________________
sssd-devel mailing list
sssd-devel(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel