sudo and LDAP

ACM Staff acmstaff at gmail.com
Mon Jul 3 05:48:48 UTC 2006


Ok, so I am running a box with 6.0-STABLE

Problem is I can't get sudo working for my LDAP based users. I
compiled sudo from the ports tree with LDAP support.  Here is some
output

as a user:

notroot at risk:~$ id notroot
uid=2018(notroot) gid=200(acm) groups=200(acm), 203(officers),
201(staff), 204(staffers)
notroot at risk:~$ sudo ls
Password:
Sorry, try again.
Password:
Sorry, try again.
Password:
Sorry, try again.
sudo: 3 incorrect password attempts
notroot at risk:~$

as root obviously:

risk# cat /usr/local/etc/sudoers
# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#

# Host alias specification

# User alias specification

# Cmnd alias specification

# Defaults specification

# Runas alias specification

# User privilege specification
root    ALL=(ALL) ALL
notroot ALL=(ALL) NOPASSWD: ALL


# Uncomment to allow people in group wheel to run all commands
%staff  ALL=(ALL)       ALL

# Same thing without a password
# %wheel        ALL=(ALL)       NOPASSWD: ALL

# Samples
# %users  ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users  localhost=/sbin/shutdown -h now


Anyhelp? Thanks.

Jim


More information about the freebsd-questions mailing list