?
Solved

ldap with visudo support

Posted on 2010-09-03
5
Medium Priority
?
717 Views
Last Modified: 2013-12-24
Hello

I need to setup ldap for our environment, as we are tired or adding / removing users on each server. therefore ldap will come handy.

I need to know if it is possible to control visudo permissions from ldap? therefore we could alter visudo on one server & it will propagate to other servers.

Thank you
0
Comment
Question by:atigris
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 68

Accepted Solution

by:
woolmilkporc earned 2000 total points
ID: 33595684
Hi,
here is a nice manual/HOWTO.
http://www.sudo.ws/sudo/sudoers.ldap.man.html
wmp
0
 
LVL 2

Author Comment

by:atigris
ID: 33605794
thanks for the link woolmilkporc, do I have to add anything to the openldap server to support this feature? or this feature it is supported by default?

from the article I understand that  I need it to change settings in the following files to support this feature.

/etc/ldap.conf
LDAP configuration file

/etc/nsswitch.conf
determines sudoers source order

/etc/openldap/schema
create a sudo schema for ldap users

I have been once told  that I need to re-compile ldap with visudo support for this feature to work! I'm not sure if that is true?

Thanks
0
 
LVL 68

Expert Comment

by:woolmilkporc
ID: 33606110
>> do I have to add anything to the openldap server <<
Of course the schema you mentioned, but nothing else, afaik.

You don't need to recompile LDAP, but you must recomple sudo to support LDAP, if you don't have an LDAP enabled binary version anyway.

And what do you mean with "visudo" support?
Since you don't need a sudoers file, you don't need "visudo" either.
I never heard that editing the LDAP entries by means of "visudo" should be possible.

The README.LDAP recommends using LDAP browsers for this.

Here it is: http://www.sudo.ws/sudo/readme_ldap.html

Good luck!

wmp
0
 
LVL 2

Author Comment

by:atigris
ID: 33716818
Still working on it, I will get back to you on this soon. Thanks woolmilkporc:
0
 
LVL 2

Author Closing Comment

by:atigris
ID: 33719287
got it all figured out!
0

Featured Post

New benefit for Premium Members - Upgrade now!

Ready to get started with anonymous questions today? It's easy! Learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows the steps required to install WordPress on Azure. Web Apps, Mobile Apps, API Apps, or Functions, in Azure all these run in an App Service plan. WordPress is no exception and requires an App Service Plan and Database to install
Recently I was talking with Tim Sharp, one of my colleagues from our Technical Account Manager team about MongoDB’s scalability. While doing some quick training with some of the Percona team, Tim brought something to my attention...
This is a high-level webinar that covers the history of enterprise open source database use. It addresses both the advantages companies see in using open source database technologies, as well as the fears and reservations they might have. In this…
In this video, Percona Director of Solution Engineering Jon Tobin discusses the function and features of Percona Server for MongoDB. How Percona can help Percona can help you determine if Percona Server for MongoDB is the right solution for …
Suggested Courses

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question