?
Solved

ldap with visudo support

Posted on 2010-09-03
5
Medium Priority
?
718 Views
Last Modified: 2013-12-24
Hello

I need to setup ldap for our environment, as we are tired or adding / removing users on each server. therefore ldap will come handy.

I need to know if it is possible to control visudo permissions from ldap? therefore we could alter visudo on one server & it will propagate to other servers.

Thank you
0
Comment
Question by:atigris
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 68

Accepted Solution

by:
woolmilkporc earned 2000 total points
ID: 33595684
Hi,
here is a nice manual/HOWTO.
http://www.sudo.ws/sudo/sudoers.ldap.man.html
wmp
0
 
LVL 2

Author Comment

by:atigris
ID: 33605794
thanks for the link woolmilkporc, do I have to add anything to the openldap server to support this feature? or this feature it is supported by default?

from the article I understand that  I need it to change settings in the following files to support this feature.

/etc/ldap.conf
LDAP configuration file

/etc/nsswitch.conf
determines sudoers source order

/etc/openldap/schema
create a sudo schema for ldap users

I have been once told  that I need to re-compile ldap with visudo support for this feature to work! I'm not sure if that is true?

Thanks
0
 
LVL 68

Expert Comment

by:woolmilkporc
ID: 33606110
>> do I have to add anything to the openldap server <<
Of course the schema you mentioned, but nothing else, afaik.

You don't need to recompile LDAP, but you must recomple sudo to support LDAP, if you don't have an LDAP enabled binary version anyway.

And what do you mean with "visudo" support?
Since you don't need a sudoers file, you don't need "visudo" either.
I never heard that editing the LDAP entries by means of "visudo" should be possible.

The README.LDAP recommends using LDAP browsers for this.

Here it is: http://www.sudo.ws/sudo/readme_ldap.html

Good luck!

wmp
0
 
LVL 2

Author Comment

by:atigris
ID: 33716818
Still working on it, I will get back to you on this soon. Thanks woolmilkporc:
0
 
LVL 2

Author Closing Comment

by:atigris
ID: 33719287
got it all figured out!
0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This post contains step-by-step instructions for setting up alerting in Percona Monitoring and Management (PMM) using Grafana.
In this blog post, we’ll look at how ClickHouse performs in a general analytical workload using the star schema benchmark test.
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…
Suggested Courses

649 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question