[SSSD-users] sudo password verification

Jacob Weber jacob at jacobweber.com
Mon Sep 8 21:44:03 UTC 2014


> Yes you can use the local sudoers file by adding a ldap user or group, 
> but it will only work on the the machine you add the user or group to, I 
> initially did this with my AD domain joined laptop.
> 
> There is a very big problem with doing it this way if you want to do it 
> for multiple machines and users, you have to alter each and every 
> sudoers file. This is where sssd-sudoers comes in, you setup the sudo 
> rules in ldap or AD (once) and get the same results everywhere.

I'm okay with having local rules; I just want the local rules to apply to LDAP users/groups. Is that what you had? Did you have them defined with NOPASSWD, or did they require a password?

Thanks,
Jacob


More information about the sssd-users mailing list