[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ubuntu sudoers won't talk to LDAP

To: openldap-technical@openldap.org
Subject: Re: ubuntu sudoers won't talk to LDAP
From: Mauricio Tavares <raubvogel@gmail.com>
Date: Fri, 19 Nov 2010 14:41:37 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :user-agent:mime-version:to:subject:references:in-reply-to :content-type:content-transfer-encoding; bh=Muthwswb7OiU9/m+zdkv7ijlp+NDJuk2Vl61ediw5p4=; b=wnMATQ+ObXox2v30NkSZwTrW8KvtVLAAZOa7N+oe2TEcqlDoicvw4HVGgFdFBFdoUx T/1UO8P0xAaSexQmJw9RtCnl22HA7D+4HUA78wJajJS1GRQFkc+U4I6lKZF/J1hxT1AH YK+h0ioqQ7n8ksyGRjIRJWtlb9GjEgNpCgpFM=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; b=VT1S1bvKBn5vIsS7Xp/INQ2o7OThq+bAXh8NsLil/bU5vmcnVAVF4G5DAxfVtorqRv qB6Qm6+rd6VMQNX708MHkTSd6ByxfrGtkJWldjKHBo0w8QX3cxh+3RILPs4yqwFs+MCf eCmGBbYtoA2wb/8SsyuA/02tWYkbnVvwaJ9UQ=
In-reply-to: <8CF0CBE1A8F053871A8A211F@[192.168.1.2]>
References: <AANLkTin+a3YmiOqCYzUDmPLpb2=vDpSNw4+pFMxk-DOL@mail.gmail.com> <8CF0CBE1A8F053871A8A211F@[192.168.1.2]>
User-agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6

On 11/19/2010 02:32 PM, Quanah Gibson-Mount wrote:

--On Friday, November 19, 2010 2:23 PM -0500 bluethundr
<bluethundr@gmail.com> wrote:

Hello Ubuntu

On our network we have our sudoers stored in LDAP. This works fine on
the CentOS 5.4 clients by placing into /etc/ldap.conf


sudoers_base ou=sudoers,ou=Services,dc=example,dc=net


and in /etc/nsswitch.conf we have the entry:


sudoers: ldap


(setting this setting to just 'ldap' instead of 'files ldap' does not
render the machine unbootable as happens if you set passwd and group
this way).

However I am attempting to set this up on an Ubuntu 9.10 client and
getting no joy so far. I have the same settings in /etc/ldap.conf and
/etc/nsswitch.conf and cannot get sudoers to work.

On the Ubuntu box, I can get LDAP entries by typing in getent passwd |
grep ldapAccount, however when you attempt to sudo it fails:


My guess would be that it is a different version of sudo. Have you read
the manual page for it?

Ubuntu has a sudo-ldap package that replaces the normal ldap with a,well, ldap-enhanced one.

--Quanah


--

Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
--------------------
Zimbra :: the leader in open source messaging and collaboration

References:
- ubuntu sudoers won't talk to LDAP
  - From: bluethundr <bluethundr@gmail.com>
- Re: ubuntu sudoers won't talk to LDAP
  - From: Quanah Gibson-Mount <quanah@zimbra.com>

Prev by Date: Re: ubuntu sudoers won't talk to LDAP
Next by Date: Re: ubuntu sudoers won't talk to LDAP
Index(es):
- Chronological
- Thread