topic SUDO Configuration with ldap in Operating System - HP-UX

SUDO Configuration with ldap

ambika_1 — Fri, 02 Jun 2006 08:00:28 GMT

Hi,
I have build sudo with ldap option. Now i am doing testing. In which ldap.conf i,e server or client we have to make following entry
sudoers_base ou=SUDOers,dc=example,dc=com?
I have tried this with the ldap server's ldap.conf file, sudo is not reading data from the database. Any thing more we have to do?.

I have inserted data into ldap in correct format.

Thanks and Regards,
Ambika

Re: SUDO Configuration with ldap

Mustafa Gulercan — Fri, 02 Jun 2006 08:57:55 GMT

hi;
Importing /etc/sudoers to LDAP:
step 1:
Ask your LDAP Admin where to create the ou=SUDOers container.
(an example location is shown below).Then use the provided script to convert your sudoers file into LDIF format.The script will also convert any default options.
#SUDOERS_BASE=ou=SUDOers,dc=example,dc=com
#export SUDOERS_BASE
#./sudoers2ldif /etc/sudoers >/tmp/sudoers.ldif

step 2:
Import into your directory server.If you are using OpenLDAP,do the following if you are using another directory,provide the LDIF file to your LDAP Admin.An example is ashown below.
#ldapadd -f /tmp/sudoers.ldif -h ldapserver > -D cn=Manager,dc=example,dc=com -W -x

regards;
mustafa

Re: SUDO Configuration with ldap

ambika_1 — Fri, 02 Jun 2006 09:25:00 GMT

Hi,
I have done all the steps given in http://www.courtesan.com/sudo/readme_ldap.html.
When i did sudo -l , its showing entries which are there in /etc/sudoers. But it should show from ldap database also. So is there ary other way to configure.

Regards,
Ambika

Re: SUDO Configuration with ldap

Mustafa Gulercan — Fri, 02 Jun 2006 09:34:14 GMT

use following LDAP browser to administer your SUDOers.
GQ-
http://biot.com/

Re: SUDO Configuration with ldap

ambika_1 — Sun, 04 Jun 2006 23:29:28 GMT

Hi,
Is there any way to check wether sudo is built with ldap options or not?

We have to build GQ tool, any special configuration is required to build GQ tool?

Thanks and Regards,
Ambika

Re: SUDO Configuration with ldap

Mustafa Gulercan — Mon, 05 Jun 2006 00:58:05 GMT

ambika;
pls read followink link;there are lots of tricks at the text.
http://www.courtesan.com/sudo/readme_ldap.html

regards;
mustafa