<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 05/12/2015 04:44 PM, Andrey Ptashnik
wrote:<br>
</div>
<blockquote
cite="mid:812E1DF1-22C5-49F2-9AB4-9E2E765E1977@cccis.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<div>Hello Team,</div>
<div><br>
</div>
<div>We have RHEL 7.1 and IPA server 4.1.0 in our environment as
well as stack of Oracle software that require existence of local
passwordless users like weblogic and oracle. </div>
<div>Users log in to servers via domain accounts at IPA server.</div>
<div><br>
</div>
<div>I’m trying to configure Sudo policy in IPA server that will
allow users in the company to log in to servers in IPA domain
and switch to weblogic or oracle user without having to enter
any passwords, but also without increasing their privileges to
root.</div>
<div>Using plain /etc/sudoers file it can be accomplished
something like below:</div>
<div><br>
</div>
<div>%users ALL = (root) </div>
</blockquote>
<br>
Users will be who of the IPA sudo rule<br>
<br>
<blockquote
cite="mid:812E1DF1-22C5-49F2-9AB4-9E2E765E1977@cccis.com"
type="cite">
<div>NOPASSWD:</div>
</blockquote>
<br>
This will be an option that you would put into the sudo rule<br>
<br>
<blockquote
cite="mid:812E1DF1-22C5-49F2-9AB4-9E2E765E1977@cccis.com"
type="cite">
<div> /bin/su – oracle <br>
</div>
</blockquote>
<br>
This will be the command. You create a command and then reference it
in the rule.<br>
<br>
At least this is what I would try.<br>
<br>
<blockquote
cite="mid:812E1DF1-22C5-49F2-9AB4-9E2E765E1977@cccis.com"
type="cite">
<div><br>
</div>
<div>How can I configure this behavior in IPA server?</div>
<div><br>
</div>
<div>
<div id="">
<div>Regards,</div>
<div><br>
</div>
<div>Andrey</div>
<div><br>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Director of Engineering for IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>