[SSSD] SSSD & sudo

Andy Kannberg andy.kannberg at gmail.com
Fri Apr 29 07:47:37 UTC 2011


Hi all,

Currently, we run SSSD on a RHEL5 update 4 box. SSSD version is 1.2.1. For
the main purpose we need it, caching credentials, it works like a charm.
Now, we have a custom compiled sudo version (sudo 1.6) which does query LDAP
for the sudo rules.

 I was testing if sudo still worked while using cached credentials. (Which
is one of the requirements of the project, as users are not allowed root
access)
and it did work. I simply pulled the network cable out of the network
interface, rebooted the machine, logged in with cached credentials and tried
a sudo su - (Which I am allowed to do). And it worked. Is this intended
behaviour, am I looking at the wrong things or did I discover a 'hidden
feature/anomaly'due to the custom sudo version ?

I tried searching on sudo and sssd with google, I only read articles that
sudo and sssd are not integrated yet(but in the works), so I am wondering
how this works.

cheers,
Andy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110429/171bb0dd/attachment.html>


More information about the sssd-devel mailing list