On Mon, Jan 30, 2017 at 06:45:19PM -0000,
mdiorio(a)gmail.com wrote:
Are your sudo rules stored in AD or locally in /etc/sudoers? I
assume
it's in AD, right?
Seems like this is the part I was missing. Not well explained AT ALL (or anywhere in any
documentation I have been looking at)!
I extended AD and am creating the rules now. The one thing that I'm not sure of is:
"Non-Unix group support is only available when an appropriate group_plugin is
defined in the global defaults sudoRole object."
So if I want to add an AD security group to the rule, how would that be done and is a
plugin needed? So I have a security group GS-Technology, I'd enter it as
%GS-Technology? What about group with spaces like Domain Admins? Would it be %Domain\
Admins, or do I need to do the domain too? Escaping the \?
%INTERNAL\\Domain\ Admins
Documentation is not very firm in this area.
Thanks.