[SSSD] SSSD & sudo

Andy Kannberg andy.kannberg at gmail.com
Fri Apr 29 14:33:16 UTC 2011


Hi,

we've configured ldap/sudo with sudo-rules living in LDAP.

cheers,
Andy

2011/4/29 JR Aquino <JR.Aquino at citrix.com>

> > Hi all,
> >
> > Currently, we run SSSD on a RHEL5 update 4 box. SSSD version is 1.2.1.
> For the main purpose we need it, caching credentials, it works like a charm.
> > Now, we have a custom compiled sudo version (sudo 1.6) which does query
> LDAP for the sudo rules.
> >
> >  I was testing if sudo still worked while using cached credentials.
> (Which is one of the requirements of the project, as users are not allowed
> root access)
> > and it did work. I simply pulled the network cable out of the network
> interface, rebooted the machine, logged in with cached credentials and tried
> a sudo su - (Which I am allowed to do). And it worked. Is this intended
> behaviour, am I looking at the wrong things or did I discover a 'hidden
> feature/anomaly'due to the custom sudo version ?
> >
> > I tried searching on sudo and sssd with google, I only read articles that
> sudo and sssd are not integrated yet(but in the works), so I am wondering
> how this works.
>
> Are you using your local /etc/sudoers or have you installed and configured
> FreeIPA/LDAP with Sudo entries living in the directory?
>
> -JR
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110429/16ae5cdf/attachment.html>


More information about the sssd-devel mailing list