[Freeipa-users] Importing /etc/sudoers into IPA.

[Rob Crittenden]

Genadi Postrilko wrote:
> I'm not sure i understand what you mean.

IPA uses its own schema for sudo so the script will not work. I haven't
looked at it so don't know what amount of effort would be needed to make
it work.

You can create the sudo commands and rules but in order to associate
user and groups with the rules they will need to exist.

How many rules are we talking about?

rob

>
> 2014-12-22 22:50 GMT+02:00 Craig White <CWhite at skytouchtechnology.com
> <mailto:CWhite at skytouchtechnology.com>>:
> 
>     I would not recommend that path with FreeIPA.____
> 
>     __ __
> 
>     This is clearly the way to go with FreeIPA____
> 
>     __ __
> 
>     https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/sudo.html____
> 
>     __ __
> 
>     Craig White____
> 
>     System Administrator____
> 
>     O623-201-8179   M602-377-9752____
> 
>     __ __
> 
>     cid:image001.png at 01CF86FE.42D51630____
> 
>     __ __
> 
>     SkyTouch Technology     4225 E. Windrose Dr.     Phoenix, AZ 85032____
> 
>     __ __
> 
>     *From:*freeipa-users-bounces at redhat.com
>     <mailto:freeipa-users-bounces at redhat.com>
>     [mailto:freeipa-users-bounces at redhat.com
>     <mailto:freeipa-users-bounces at redhat.com>] *On Behalf Of *Genadi
>     Postrilko
>     *Sent:* Monday, December 22, 2014 1:38 PM
>     *To:* freeipa-users at redhat.com <mailto:freeipa-users at redhat.com>
>     *Subject:* [Freeipa-users] Importing /etc/sudoers into IPA.____
> 
>     __ __
> 
>     Hello All.____
> 
>     __ __
> 
>     I'm planning to migrate the /etc/sudoers into the IPA.____
> 
>     I have read that sudoers2ldif should be used to import /etc/sudoers
>     into LDAP.____
> 
>     http://www.sudo.ws/sudo/readme_ldap.html ____
> 
>     The script will work as is? or changes should be add?____
> 
>     Should the users and group mentioned in sudoers be created
>     beforehand?____
> 
>     __ __
> 
>     Thanks,____
> 
>     Genadi.____
> 
> 
> 
>