<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> </head> <body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;"> <div>Hello Team,</div> <div><br> </div> <div>We have RHEL 7.1 and IPA server 4.1.0 in our environment as well as stack of Oracle software that require existence of local passwordless users like weblogic and oracle. </div> <div>Users log in to servers via domain accounts at IPA server.</div> <div><br> </div> <div>I’m trying to configure Sudo policy in IPA server that will allow users in the company to log in to servers in IPA domain and switch to weblogic or oracle user without having to enter any passwords, but also without increasing their privileges to root.</div> <div>Using plain /etc/sudoers file it can be accomplished something like below:</div> <div><br> </div> <div>%users ALL = (root) NOPASSWD: /bin/su – oracle </div> <div><br> </div> <div>How can I configure this behavior in IPA server?</div> <div><br> </div> <div> <div id=""> <div>Regards,</div> <div><br> </div> <div>Andrey</div> <div><br> </div> </div> </div> </body> </html>