On 07/19/2013 11:03 PM, Licause, Al (CSC AMS BCS - UNIX/Linux Network
Support) wrote:
Having asked that....I just found the man page sudoers.ldap
I'll read on before asking more stupid questions.
Al
Hi,
the information on configuring sudo to work with sssd can be found in
sssd-sudo manual page. To summarize it you need to:
1. put "sudoers: files sss" in /etc/nsswitch.conf
2. edit sssd.conf
- [sssd]/services contains "sudo"
- [domain/yourdomain]/sudo_provider = ldap
- more configuration depends whether you use pure ldap or ipa/ad, see
man sssd-sudo
You do not have to configure ldap.conf.
-----Original Message-----
From: sssd-users-bounces(a)lists.fedorahosted.org
[mailto:sssd-users-bounces@lists.fedorahosted.org] On Behalf Of Ondrej Valousek
Sent: Friday, July 19, 2013 12:18 PM
To: End-user discussions about the System Security Services Daemon
Subject: Re: [SSSD-users] sssd and ldap based sudoers
That said, the sudoers.ldap file needs to be updated to refer to sssd rather than ldap
(which is now hopelessly obsoleted).
O.
________________________________________
From: sssd-users-bounces(a)lists.fedorahosted.org
[sssd-users-bounces(a)lists.fedorahosted.org] on behalf of Lukas Slebodnik
[lslebodn(a)redhat.com]
Sent: Friday, July 19, 2013 8:54 PM
To: End-user discussions about the System Security Services Daemon
Subject: Re: [SSSD-users] sssd and ldap based sudoers
On (19/07/13 18:25), Licause, Al (CSC AMS BCS - UNIX/Linux Network Support) wrote:
> I'm working with a customer that has implemented the sudoers schema on
> their ldap server and I'd like to know if there are any components that must be
placed in sssd.conf to get this to work.
>
> The man sudoers.ldap only mentions ldap.conf and not sssd.conf. So to enable
sudoers on
> ldap, do we need both sssd.conf and /etc/ldap.conf ?
>
> If this can all go in sssd.conf, which directives are necessary and what is the
correct syntax ?
>
> Thanks
> Al Licause
I can recommend you to read presentation from "FreeIPA Training Series"
http://www.freeipa.org/images/7/77/Freeipa30_SSSD_SUDO_Integration.pdf
There is very well explained: How to configure sudo to work with SSSD.
I would not explain it in better.
Regards,
Lukas