From owner-freebsd-questions@FreeBSD.ORG Mon Jul 3 19:20:59 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6B75E16A403 for ; Mon, 3 Jul 2006 19:20:59 +0000 (UTC) (envelope-from acmstaff@gmail.com) Received: from py-out-1112.google.com (py-out-1112.google.com [64.233.166.177]) by mx1.FreeBSD.org (Postfix) with ESMTP id DE6FD43D48 for ; Mon, 3 Jul 2006 19:20:58 +0000 (GMT) (envelope-from acmstaff@gmail.com) Received: by py-out-1112.google.com with SMTP id c63so1224139pyc for ; Mon, 03 Jul 2006 12:20:58 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=ZU7rKYwlagWVBboPxE4u+dyvYRFdFUlur0K1jaKmPG7l5/4tcytkUHPWUxRNrOz9AhE1vUEwZcM1h0VurWAkDF/ydrzM66u16cbXqQCBJS9RA8ElqrdLfxIcO3NRE273FHoH31ExUOS8eegkiBavqungi1brVH3Py8fuaqmH2rk= Received: by 10.35.18.18 with SMTP id v18mr1165159pyi; Mon, 03 Jul 2006 12:20:58 -0700 (PDT) Received: by 10.35.112.19 with HTTP; Mon, 3 Jul 2006 12:20:58 -0700 (PDT) Message-ID: Date: Mon, 3 Jul 2006 12:20:58 -0700 From: "ACM Staff" To: "Dan Nelson" In-Reply-To: <20060703062231.GE4915@dan.emsphone.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <20060703062231.GE4915@dan.emsphone.com> Cc: freebsd-questions@freebsd.org Subject: Re: sudo and LDAP X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Jul 2006 19:20:59 -0000 Ok, so its working but I realized a slight problem today when went back to check on things. Its not prompting for a password. Sudoers isn't on NOPASSWD so I am assuming its my pam.d/sudo file. What am I missing? risk# cat /etc/pam.d/sudo # # $FreeBSD: src/etc/pam.d/su,v 1.16 2003/07/09 18:40:49 des Exp $ # # PAM configuration for the "su" service # # auth auth sufficient pam_rootok.so no_warn auth sufficient pam_self.so no_warn auth sufficient /usr/local/lib/pam_ldap.so no_warn auth requisite pam_group.so no_warn group=wheel root_only fail_safe auth include system # account account sufficient /usr/local/lib/pam_ldap.so no_warn account include system # session session sufficient /usr/local/lib/pam_ldap.so no_warn session required pam_permit.so Thanks Jim On 7/2/06, Dan Nelson wrote: > In the last episode (Jul 02), ACM Staff said: > > Ok, so I am running a box with 6.0-STABLE > > > > Problem is I can't get sudo working for my LDAP based users. I > > compiled sudo from the ports tree with LDAP support. Here is some > > output > > > > as a user: > > > > notroot@risk:~$ id notroot > > uid=2018(notroot) gid=200(acm) groups=200(acm), 203(officers), > > 201(staff), 204(staffers) > > notroot@risk:~$ sudo ls > > Password: > > Sorry, try again. > > Have you created a pam.d/sudo file, or edited your pam.d/other file to > include pam_ldap.so? I recommend copying the pam.d/su file, then > editing pam.d/system to include pam_ldap.so. > > -- > Dan Nelson > dnelson@allantgroup.com >