<html><body><div style="font-family: times new roman, new york, times, serif; font-size: 12pt; color: #000000"><div>Hi,</div><div><br></div><div><br></div><hr id="zwchr"><blockquote style="border-left:2px solid #1010FF;margin-left:5px;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><div dir="rtl"><div dir="ltr">Hello All.</div><div dir="ltr"><br></div><div dir="ltr">I'm planning to migrate the /etc/sudoers into the IPA.</div><div dir="ltr">I have read that <span style="color:rgb(0,0,0);font-family:'Courier New',Courier,monospace;background-color:rgb(252,252,252)">sudoers2ldif </span><span style="background-color:rgb(252,252,252)"><span style="font-family: arial,helvetica,sans-serif;" data-mce-style="font-family: arial,helvetica,sans-serif;" face="arial, helvetica, sans-serif"><span style="color: #000000;" data-mce-style="color: #000000;" color="#000000">should be used to import /etc/sudoers into LDAP.</span></span></span></div><div dir="ltr"><a href="http://www.sudo.ws/sudo/readme_ldap.html" target="_blank">http://www.sudo.ws/sudo/readme_ldap.html</a></div><div dir="ltr">The script will work as is? or changes should be add?</div><div dir="ltr">Should the users and group mentioned in sudoers be created beforehand?</div></div></blockquote><div>FreeIPA schema for sudo is different from what the script expects and produces so it will not be helpful.<br></div><div type="_moz">You can instead write own script that converts existing /etc/sudoers into a series of calls of IPA command line.<br></div><div><br></div><div>I have no handy examples of how to do it.<br></div><div>-- <br></div><div><span name="x"></span>/ Alexander Bokovoy<span name="x"></span><br></div></div></body></html>