<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 02/13/2014 06:23 PM, Todd Maugh wrote:
<blockquote
cite="mid:6FB698E172A95F49BE009B36D56F53E2273242@EXCHMB1-ELS.BWINC.local"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<style id="owaParaStyle" type="text/css">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
P {margin-top:0;margin-bottom:0;}</style>
<div style="direction: ltr; font-family: Tahoma; color: rgb(0, 0,
0); font-size: 10pt;">and If I am configuring the sud-ldap.conf<br>
<br>
<br>
what should it look like does any one have an example?<br>
<br>
</div>
</blockquote>
<br>
You have two options. Sudo can be integrated with SSSD or not.<br>
If you want SUDO to be integrated then this should help:
<a class="moz-txt-link-freetext" href="http://www.freeipa.org/images/7/77/Freeipa30_SSSD_SUDO_Integration.pdf">http://www.freeipa.org/images/7/77/Freeipa30_SSSD_SUDO_Integration.pdf</a><br>
<br>
If you want to use SUDO independently from sssd and connect directly
to IPA from SUDO you need to configure sudo -ldap.conf and use some
user to bind to IPA. This user should be configured in the file.<br>
See more details in the IPA docs:
<a class="moz-txt-link-freetext" href="https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html-single/Identity_Management_Guide/index.html#config-sudo-clients">https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html-single/Identity_Management_Guide/index.html#config-sudo-clients</a><br>
<br>
<br>
<blockquote
cite="mid:6FB698E172A95F49BE009B36D56F53E2273242@EXCHMB1-ELS.BWINC.local"
type="cite">
<div style="direction: ltr;font-family: Tahoma;color:
#000000;font-size: 10pt;">
<br>
<div style="font-family: Times New Roman; color: #000000;
font-size: 16px">
<hr tabindex="-1">
<div style="direction: ltr;" id="divRpF781617"><font
color="#000000" face="Tahoma" size="2"><b>From:</b>
<a class="moz-txt-link-abbreviated" href="mailto:freeipa-users-bounces@redhat.com">freeipa-users-bounces@redhat.com</a>
[<a class="moz-txt-link-abbreviated" href="mailto:freeipa-users-bounces@redhat.com">freeipa-users-bounces@redhat.com</a>] on behalf of Todd Maugh
[<a class="moz-txt-link-abbreviated" href="mailto:tmaugh@boingo.com">tmaugh@boingo.com</a>]<br>
<b>Sent:</b> Thursday, February 13, 2014 3:17 PM<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:freeipa-users@redhat.com">freeipa-users@redhat.com</a><br>
<b>Subject:</b> [Freeipa-users] Setting up sudo<br>
</font><br>
</div>
<div>
<div style="direction:ltr; font-family:Tahoma;
color:#000000; font-size:10pt">the documentation is kinda
vague on some parts<br>
<br>
from the documentation:<br>
<br>
Because the <code class="command">sudo</code> information
is not available anonymously over LDAP by default,
Identity Management defines a default
<code class="command">sudo</code> user, <code
class="systemitem">uid=sudo,cn=sysaccounts,cn=etc,$SUFFIX</code>,
which can be set in the LDAP/<code class="command">sudo</code>
configuration file,
<code class="filename">/etc/sud-ldap.conf</code>. <br>
<br>
so is this user supposed to already pre defined. or do I
need to create the user, and then modify them<br>
<br>
thanks<br>
<br>
-Todd<br>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>