[SSSD-users] sudo password verification

Lukas Slebodnik lslebodn at redhat.com
Mon Sep 8 21:02:32 UTC 2014


On (08/09/14 22:55), Jakub Hrozek wrote:
>On Mon, Sep 08, 2014 at 01:51:49PM -0700, Jacob Weber wrote:
>> /etc/nsswitch.conf has:
>> 
>> passwd:     files sss
>> shadow:     files sss
>> group:      files sss
>> hosts:      files dns
>> bootparams: nisplus [NOTFOUND=return] files
>> ethers:     files
>> netmasks:   files
>> networks:   files
>> protocols:  files
>> rpc:        files
>> services:   files sss
>> netgroup:   files sss
>> publickey:  nisplus
>> automount:  files
>> aliases:    files nisplus
>> 
>> 
>> 
>> /etc/sssd/sssd.conf has:
>> 
>> [sssd]
>> config_file_version = 2
>> services = nss, pam
>> domains = AD
>> 
>> [nss]
>> filter_users = root
>> override_shell = /bin/bash
>> override_homedir = /home/%u
>> 
>> [pam]
>> 
>> [domain/AD]
>> 
>> id_provider = ldap
>> auth_provider = ldap
>> chpass_provider = ldap
>> 
>> access_provider = ldap
>> ldap_uri = ldaps://my-ldap-server/
>> ldap_schema = rfc2307bis
>> (other ldap settings)
>> 
>> cache_credentials = true
>> enumerate = false
>
>Well, sudo is not configured :-)
>
>Can you check out man sssd-ldap, there are some examples, hopefully that
>would be helpful..
Probably you meant manual page sssd-sudo.

LS


More information about the sssd-users mailing list