From owner-freebsd-questions@FreeBSD.ORG  Mon Jul  3 06:22:33 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 14D4B16A415
	for <freebsd-questions@freebsd.org>;
	Mon,  3 Jul 2006 06:22:33 +0000 (UTC)
	(envelope-from dan@dan.emsphone.com)
Received: from dan.emsphone.com (dan.emsphone.com [199.67.51.101])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 8F083443E9
	for <freebsd-questions@freebsd.org>;
	Mon,  3 Jul 2006 06:22:32 +0000 (GMT)
	(envelope-from dan@dan.emsphone.com)
Received: (from dan@localhost)
	by dan.emsphone.com (8.13.1/8.13.4) id k636MVjY067709;
	Mon, 3 Jul 2006 01:22:31 -0500 (CDT) (envelope-from dan)
Date: Mon, 3 Jul 2006 01:22:31 -0500
From: Dan Nelson <dnelson@allantgroup.com>
To: ACM Staff <acmstaff@gmail.com>
Message-ID: <20060703062231.GE4915@dan.emsphone.com>
References: <eae658e60607022248l1e407c57p6ac6def2b319043@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <eae658e60607022248l1e407c57p6ac6def2b319043@mail.gmail.com>
X-OS: FreeBSD 5.5-PRERELEASE
X-message-flag: Outlook Error
User-Agent: Mutt/1.5.11
Cc: freebsd-questions@freebsd.org
Subject: Re: sudo and LDAP
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 03 Jul 2006 06:22:33 -0000

In the last episode (Jul 02), ACM Staff said:
> Ok, so I am running a box with 6.0-STABLE
> 
> Problem is I can't get sudo working for my LDAP based users. I
> compiled sudo from the ports tree with LDAP support.  Here is some
> output
> 
> as a user:
> 
> notroot@risk:~$ id notroot
> uid=2018(notroot) gid=200(acm) groups=200(acm), 203(officers),
> 201(staff), 204(staffers)
> notroot@risk:~$ sudo ls
> Password:
> Sorry, try again.

Have you created a pam.d/sudo file, or edited your pam.d/other file to
include pam_ldap.so?  I recommend copying the pam.d/su file, then
editing pam.d/system to include pam_ldap.so.

-- 
	Dan Nelson
	dnelson@allantgroup.com