Hi,

we've configured ldap/sudo with sudo-rules living in LDAP.

cheers,
Andy

2011/4/29 JR Aquino <JR.Aquino@citrix.com>
> Hi all,
>
> Currently, we run SSSD on a RHEL5 update 4 box. SSSD version is 1.2.1. For the main purpose we need it, caching credentials, it works like a charm.
> Now, we have a custom compiled sudo version (sudo 1.6) which does query LDAP for the sudo rules.
>
>  I was testing if sudo still worked while using cached credentials. (Which is one of the requirements of the project, as users are not allowed root access)
> and it did work. I simply pulled the network cable out of the network interface, rebooted the machine, logged in with cached credentials and tried a sudo su - (Which I am allowed to do). And it worked. Is this intended behaviour, am I looking at the wrong things or did I discover a 'hidden feature/anomaly'due to the custom sudo version ?
>
> I tried searching on sudo and sssd with google, I only read articles that sudo and sssd are not integrated yet(but in the works), so I am wondering how this works.

Are you using your local /etc/sudoers or have you installed and configured FreeIPA/LDAP with Sudo entries living in the directory?

-JR
_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/sssd-devel