Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 2 Jul 2006 22:48:46 -0700
From:      "ACM Staff" <acmstaff@gmail.com>
To:        freebsd-questions@freebsd.org
Subject:   sudo and LDAP
Message-ID:  <eae658e60607022248l1e407c57p6ac6def2b319043@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
Ok, so I am running a box with 6.0-STABLE

Problem is I can't get sudo working for my LDAP based users. I
compiled sudo from the ports tree with LDAP support.  Here is some
output

as a user:

notroot@risk:~$ id notroot
uid=2018(notroot) gid=200(acm) groups=200(acm), 203(officers),
201(staff), 204(staffers)
notroot@risk:~$ sudo ls
Password:
Sorry, try again.
Password:
Sorry, try again.
Password:
Sorry, try again.
sudo: 3 incorrect password attempts
notroot@risk:~$

as root obviously:

risk# cat /usr/local/etc/sudoers
# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#

# Host alias specification

# User alias specification

# Cmnd alias specification

# Defaults specification

# Runas alias specification

# User privilege specification
root    ALL=(ALL) ALL
notroot ALL=(ALL) NOPASSWD: ALL


# Uncomment to allow people in group wheel to run all commands
%staff  ALL=(ALL)       ALL

# Same thing without a password
# %wheel        ALL=(ALL)       NOPASSWD: ALL

# Samples
# %users  ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users  localhost=/sbin/shutdown -h now


Anyhelp? Thanks.

Jim



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?eae658e60607022248l1e407c57p6ac6def2b319043>