LDAP su - username problem

[kevin leblanc]

Hi the list !
I have a problem on PAM configuration on RHEL 4 and 5.
Let me explain you the problem :

I have a ldap database and I configure PAM to make users able to log into
RHEL hosts.
That works fine !
After I configure SUDO to deport sudoers into LDAP, that works fine too..

Now, I want ldap users able to run "sudo su - localUser" and to enter *only*
his Ldap password.

to make it more clear, let's take a example :
toto : local user with PWD1
testLdapUser : ldap user with PWD 2

I want a user able to do this :
1. ssh testLdapUser at host => enter PWD2 (OK)
2. sudo su - toto => enter only PWD2 (KO user have to enter PWD1 then PWD2)

Is it possible to do this ?
If yes, how ?

thanks

-- 
KeV
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pam-list/attachments/20090624/f8612923/attachment.htm>