On Feb 25, 2012, at 1:59 PM, "Marco Pizzoli"
<marco.pizzoli@gmail.com<mailto:marco.pizzoli@gmail.com>> wrote:
Hi guys,
I had a look at this guide [1] but I'm not understanding the presented use-case.
- I see that I have to add in /etc/nsswitch.conf the line "sudoers: files
ldap".
-> I'm telling sudo to check rules via ldap
Yes. This doc was written before sssd or sudo had support for one another.
- I have to add in sssd.conf the directive "ldap_netgroup_search_base =
cn=ng,cn=compat,dc=example,dc=com"
-> I'm telling sssd where to search for netgroups
This is my fault, this too was documented prior to the default. This is no longer
necessary.
- I have to edit the file nslcd.conf and insert all ldap related stuff necessary to access
the ldap server.
This come my question: why do I have to split my conf between sssd.conf and nslcd.conf ?
Because only the newest sudo version has support and it is not yet available In rhel...
Can't I use directly sssd.conf and use it as sole tool/conf to access the ldap
server?
What am I missing?
Again. Docs were written before any form of sssd support for sudo. I will see if I can
locate any formal docs on which versions, and what configs are necessary.
Thanks a lot as usual
Marco
[1]
http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Identit...
_______________________________________________
sssd-devel mailing list
sssd-devel@lists.fedorahosted.org<mailto:sssd-devel@lists.fedorahosted.org>
https://fedorahosted.org/mailman/listinfo/sssd-devel