sssd-users September 2014

sssd-users@lists.fedorahosted.org

15 participants
23 discussions

Re: [SSSD-users] sudo password verification
by Jacob Weber 08 Sep '14

08 Sep '14

OK, thanks -- I'll check it out. I was thinking that sssd-sudo was only needed to get the rules themselves from the LDAP server.

1 0

Re: [SSSD-users] sudo password verification
by Jacob Weber 08 Sep '14

08 Sep '14

/etc/nsswitch.conf has: passwd: files sss shadow: files sss group: files sss hosts: files dns bootparams: nisplus [NOTFOUND=return] files ethers: files netmasks: files networks: files protocols: files rpc: files services: files sss netgroup: files sss publickey: nisplus automount: files aliases: files nisplus /etc/sssd/sssd.conf has: [sssd] config_file_version = 2 services = nss, pam domains = AD [nss] filter_users = root override_shell = /bin/bash override_homedir = /home/%u [pam] [domain/AD] id_provider = ldap auth_provider = ldap chpass_provider = ldap access_provider = ldap ldap_uri = ldaps://my-ldap-server/ ldap_schema = rfc2307bis (other ldap settings) cache_credentials = true enumerate = false

3 2

sudo password verification
by Jacob Weber 08 Sep '14

08 Sep '14

I have sssd configured to use LDAP on CentOS 6.5. I can ssh to the box, and it accepts my LDAP user's password. But when I try to run a sudo command that requires a password, it doesn't accept the password. It looks like it isn't even using sssd; when I set debug_level=7, nothing shows up on the log. Is there a way to make sudo use sssd to verify the password? Thanks, Jacob

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

sssd-users September 2014