On Wed, Mar 18, 2015 at 07:54:04PM -0400, Dmitri Pal wrote:
On 03/18/2015 07:33 PM, Olivier wrote:
>Thanks for your replies,
>
>I found the ticket, that's why I asked : sounds to me a hard job to plan,
>especially now with DNSEC validation (and not sure that it would have a
>real added value)... A "natural" way for sssd if really a plan might be to
>catch zones from one of the ldap bakend available for bind ?
>
>Anyway, the real reason I'm investigating : I'm distributing sudo rules
>with ldap and I want to use hostname to tell which host the rules appliy
>on. I have told in nsswitch.conf to query the DNS to find out the hostname
>but I'm not sure about how is collected the hostname from the dns in the
>checking process (especially if the machine has more than one interface) ?
>Is the label considered as being the hostname the reverse of the IP adress
>for the default interface ?
>
You know that you can use SSSD with sudo integration, right? SSSD will take
care of this for you automatically.
http://www.freeipa.org/images/7/77/Freeipa30_SSSD_SUDO_Integration.pdf
yes, and you might even find the option ldap_sudo_hostnames useful if,
for whatever reason you have trouble with FQDN..