20 lines
620 B
Plaintext
20 lines
620 B
Plaintext
|
To verify that sudo works with SSSD,
|
||
|
|
there's has to be a working LDAP server where the sudoers file
|
||
|
|
will be saved, local running SSSD and sudo configured to use
|
||
|
|
the SSSD plugin.
|
||
|
|
|
||
|
|
The sudoers file has to be stored in LDAP.
|
||
|
|
A [sudo] service has to be configured in /etc/sssd/sssd.conf
|
||
|
|
Sudo needs to be instructed to use SSSD, this is done in /etc/nsswitch.conf,
|
||
|
|
by adding a line "sudoers: files sss"
|
||
|
|
|
||
|
|
Related material:
|
||
|
|
|
||
|
|
/usr/share/doc/packages/sudo/README.LDAP provides a guide how to
|
||
|
|
make sudo work with LDAP.
|
||
|
|
|
||
|
|
man sudoers.ldap(5) describes the LDAP-based sudoers file
|
||
|
|
|
||
|
|
man sssd-ldap(5) describes the LDAP sudo options.
|
||
|
|
|