Re: [Freeipa-users] sudo rules in IPA infrastructure

2012-05-21 Thread Jakub Hrozek
On Sat, May 19, 2012 at 03:11:44PM -0700, David Copperfield wrote: Hi Jakub and Rich, Got it. Thanks a lot on the HBAC and sudoes maps access. I think I got confused with the graph in the powerpoint presentation 

Re: [Freeipa-users] sudo rules in IPA infrastructure

2012-05-19 Thread Jakub Hrozek
On Fri, May 18, 2012 at 02:35:18PM -0700, Gelen James wrote: Hi all, Are the sudo rules applied to IPA clients through nss_ldap, instead of sssd? Neither :-) sudo looks up the user information via the standard name-service-switch maps, so if your machine is configured to fetch user

[Freeipa-users] sudo rules in IPA infrastructure

2012-05-18 Thread Gelen James
Hi all,  Are the sudo rules applied to IPA clients through nss_ldap, instead of sssd?   I tried that on Redhat 6.2 clients, and some documents said that sudo rules would work when enabled inside /etc/nslcd.conf, but we need to hack the script /etc/init.d/nslcd.conf a little bit -- basically to

Re: [Freeipa-users] sudo rules in IPA infrastructure

2012-05-18 Thread Stephen Ingram
On Fri, May 18, 2012 at 2:35 PM, Gelen James hahaha_...@yahoo.com wrote: Hi all,  Are the sudo rules applied to IPA clients through nss_ldap, instead of sssd?  I tried that on Redhat 6.2 clients, and some documents said that sudo rules would work when enabled inside /etc/nslcd.conf, but we

Re: [Freeipa-users] sudo rules in IPA infrastructure

2012-05-18 Thread Gelen James
Sent: Friday, May 18, 2012 2:58 PM Subject: Re: [Freeipa-users] sudo rules in IPA infrastructure On Fri, May 18, 2012 at 2:35 PM, Gelen James hahaha_...@yahoo.com wrote: Hi all,  Are the sudo rules applied to IPA clients through nss_ldap, instead of sssd?  I tried that on Redhat 6.2