1753289 Members
5206 Online
108792 Solutions
New Discussion юеВ

Re: sudo & LDAP

 
Joseph Hoh
Frequent Advisor

sudo & LDAP

I just got LDAP password authentication using PAM_LDAP working on my system. Now when sudo prompts for a password it does not reconize the LDAP passwords. Any ideas?
5 REPLIES 5
Peter Kain
Advisor

Re: sudo & LDAP

I now have the same problem. Did you get it resolved.
Vijaya Kumar_3
Respected Contributor

Re: sudo & LDAP

Okay... Did you check Sudo supports PAM. We need to setup during installation...

Sudo installation refernce says this:

--with-pam
Enable PAM support. Tested on:
Redhat Linux 5.x, 6.0, and 6.1
Solaris 2.6 and 7
HP-UX 11.0
NOTE: on RedHat Linux you *must* install an /etc/pam.d/sudo file.
You may either use the sample.pam file included with sudo or use
/etc/pam.d/su as a reference. On Solaris and HP-UX 11 systems
you should check (and understand) the contents of /etc/pam.conf.
Do a "man pam.conf" for more information and consider using the
"debug" option, if available, with your PAM libraries in
/etc/pam.conf to obtain syslog output for debugging purposes.


Refer this URL:

http://www.courtesan.com/sudo/install.html

Hope this helps
Vijay
Known is a drop, unknown is ocean - visit me at http://vijay.theunixplace.com
Vijaya Kumar_3
Respected Contributor

Re: sudo & LDAP

I forgot to mention one thing.

Which sudo download you are using. I thing you may need to build your own sudo for your HP systems with PAM enabled.

If it is PAM support is already supported (i hope it is), then try to configure /etc/pam.conf

Thanks
Vijay
Known is a drop, unknown is ocean - visit me at http://vijay.theunixplace.com
Peter Kain
Advisor

Re: sudo & LDAP

Thanks vijay. I was using a download from the
HP Software Porting and Archive center in utah
which is not compiled with --with-pam.

Once I downloaded the source and compiled with-pam I was able to authenticate to the ldap directory when running sudo.

Peter Kain
Advisor

Re: sudo & LDAP

Vijay, Sorry I don't think I can assigned points to your answer as I would like since I didn't initiate the posting.