From owner-freebsd-questions@FreeBSD.ORG  Mon Jul  3 05:48:48 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 6128816A47B
	for <freebsd-questions@freebsd.org>;
	Mon,  3 Jul 2006 05:48:48 +0000 (UTC)
	(envelope-from acmstaff@gmail.com)
Received: from py-out-1112.google.com (py-out-1112.google.com [64.233.166.181])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 929AF43D4C
	for <freebsd-questions@freebsd.org>;
	Mon,  3 Jul 2006 05:48:47 +0000 (GMT)
	(envelope-from acmstaff@gmail.com)
Received: by py-out-1112.google.com with SMTP id c63so985486pyc
	for <freebsd-questions@freebsd.org>;
	Sun, 02 Jul 2006 22:48:47 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
	h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
	b=tvoaS166urookTTBL32eGqZwVE85f4FrlHSRtc+GfcrkfvjpJDbjupmkg3bMW+BJW0rDH6qzU63lMaZ74qvg/G5B0wJCc4UwCb5H2hSOMwpgtgYLrejV1rwz2tHaxJooGGQdGHqTm7zpc4L8gqKW4C7IHGcQ8YXjFy/rYU+zPVA=
Received: by 10.35.78.13 with SMTP id f13mr622507pyl;
	Sun, 02 Jul 2006 22:48:46 -0700 (PDT)
Received: by 10.35.112.19 with HTTP; Sun, 2 Jul 2006 22:48:46 -0700 (PDT)
Message-ID: <eae658e60607022248l1e407c57p6ac6def2b319043@mail.gmail.com>
Date: Sun, 2 Jul 2006 22:48:46 -0700
From: "ACM Staff" <acmstaff@gmail.com>
To: freebsd-questions@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Subject: sudo and LDAP
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 03 Jul 2006 05:48:48 -0000

Ok, so I am running a box with 6.0-STABLE

Problem is I can't get sudo working for my LDAP based users. I
compiled sudo from the ports tree with LDAP support.  Here is some
output

as a user:

notroot@risk:~$ id notroot
uid=2018(notroot) gid=200(acm) groups=200(acm), 203(officers),
201(staff), 204(staffers)
notroot@risk:~$ sudo ls
Password:
Sorry, try again.
Password:
Sorry, try again.
Password:
Sorry, try again.
sudo: 3 incorrect password attempts
notroot@risk:~$

as root obviously:

risk# cat /usr/local/etc/sudoers
# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#

# Host alias specification

# User alias specification

# Cmnd alias specification

# Defaults specification

# Runas alias specification

# User privilege specification
root    ALL=(ALL) ALL
notroot ALL=(ALL) NOPASSWD: ALL


# Uncomment to allow people in group wheel to run all commands
%staff  ALL=(ALL)       ALL

# Same thing without a password
# %wheel        ALL=(ALL)       NOPASSWD: ALL

# Samples
# %users  ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users  localhost=/sbin/shutdown -h now


Anyhelp? Thanks.

Jim