[Fedora-directory-users] Sudo and Ldap

[Aaron Bliss]

Kashif,

Make sure you have defined the group in ldap and added the posix attributes
and object class to the group.  At a bare minimum, you'll need the top,
groupofuniquenames and posixgroup objecclassess.

 

Aaron

 

From: fedora-directory-users-bounces at redhat.com
[mailto:fedora-directory-users-bounces at redhat.com] On Behalf Of Kashif Ali
Sent: Tuesday, September 09, 2008 4:39 PM
To: Fedora-directory-users at redhat.com
Subject: [Fedora-directory-users] Sudo and Ldap

 

Hello all,

I have successfully setup FDS on Centos 5.2, and manage to get users signing
on without any issues. However if I edit the sudoers file to allow a group
on ldap use sudo, the sudo command does not see the members of the group or
I think the group itself?

I have no idea why this is: 

if I run the command 'id' as the given user you can clear see the group
memberships, however if I do: getent group linuxops I see:

linuxops:*:6000:

with no members??? however SSHD AllowGroups works? I have configured sshd to
only allow members of the linxops group to login and this works fine? so my
question is why is sudo behaving differently?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20080909/e6b97458/attachment.htm>