[SSSD] SUDO responder/cache behavior - r00tkit

arun scaria arunscaria91 at gmail.com
Thu Jul 28 13:28:00 UTC 2011


On Thu, Jul 28, 2011 at 2:10 PM, Gowrishankar Rajaiyan <gsr at redhat.com>wrote:

> On 07/28/2011 07:22 AM, arun scaria wrote:
> > Hi all,
> > I'v created my write-up on SUDO responder/cache behavior at
> >
> https://fedorahosted.org/sssd/wiki/DesignDocs/SudoSupport/SudoResponderCacheBehavior
> .
> > I'd love to hear your opinion on it. Please take a review and comment.
> >
>
> One question:
> How do we plan to include "sudoOption=!authenticate" (where
> !authenticate=NOPASSWD) in a sudorule during offline?
>
> The option !authenticate is not specified anywhere in the standard sudo
schema at http://www.gratisoft.us/sudo/man/1.8.1/sudoers.ldap.man.html. But
this option is found in all the blogs and tutorials as the alternative to
the NOPASSWD option in the sudoers file. In the current implementation of
sudo plugin we are doing the  pam authentication with sudo pam config file.
This is done before we query the sssd for authentication for sudo. So that
the user will be requested password even if the !authenticate  sudoOption is
enabled.


> --
> Regards,
>   Shanks
>
> Looking to carve out IT costs?
> www.redhat.com/carveoutcosts/
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel
>



-- 
Arun Scaria
Chairman    |  MEC Association of Computer Students (MACS)
Junior Under Graduate, Computer Science and Engineering (2008-2012)
Govt. Model Engineering College
Cochin-21.
(M) +918089528527.
arunscaria91 at gmail.com
arunscaria at acm.org
arun.scaria at arbitron.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110728/898b52bc/attachment.html>


More information about the sssd-devel mailing list