HP-UX sudo and LDAP

[Eric Freeman_1]

We are running LDAPUX B.04.00, on HP-UX B.11.11. We are authenticating against LDAP without any issues. I want to point sudo v1.70 to authenticate against ldap. According to the sudo documentation I need to add the following lines to ldap.conf.

What file on HPUX do I add this to? I don't believe it is /etc/ldap.conf


uri ldap://ldapserver
bind_timelimit 30
timelimit 30
sudoers_base ou=SUDOers,dc=example,dc=com

I have added the following lines to my /etc/pam.conf and /etc/pam.ldap.trusted because we are running a trusted system.
sudo account sufficient /usr/lib/security/libpam_unix.1
sudo account required /usr/lib/security/libpam_ldap.1

I also added the following lines to my /etc/nsswitch.conf file

sudoers ldap files.

Any help would be appreciated.


Thank you


Thank you.

[Johnson Punniyalingam]

Hi Eric,

have you tried edting .? in HPUX , you can run the command

# visudo

example:-

# sudo lsof

Thanks,
Johnson

[Armin Kunaschik]

Do you want to let sudo connect to LDAP directly or do you want to use PAM for that?
If PAM is working, sudo should work too automagicaly.
For direct connection check http://www.sudo.ws/sudo/readme_ldap.html

BTW: sudoers is an invalid option in nsswitch.conf (see man nsswitch.conf)!

My 2 cents,
Armin

PS: Assign points if you find answers useful!

[Eric Freeman_1]

Sorry, I may not have been clear. I don't see sudo talking to my ldap server. I modified the /usr/local/etc/openldap/ldap.conf file

I need to put the sudoers base and ldap host somewhere. I am not sure where to put this information.

[Eric Freeman_1]

I need to compile sudo with ldap. I thought the depot was configured with ldap support but it was just configured with PAM