Re: [Freeipa-users] freeipa managed sudoers on Solaris 10

2015-01-19 Thread Martin Kosek 

On 01/19/2015 08:01 PM, Dmitri Pal wrote:

On 01/19/2015 01:50 PM, sipazzo wrote:

I am having trouble finding relevant documentation on using freeipa to manage
sudoers for a Solaris client. Has anyone successfully set this up without
adding a bunch of non-standard packages? I am running freeipa 3.0.0-42 and
any help is appreciated.



AFAIR Solaris does not carry sudo packages so if you plan to use sudo you would
need to get packages from upstream.
Other than that it is not different from using SUDO from a Linux client that
does not have SSSD.


BTW, I see you are using quite old FreeIPA version. If you are running on 
RHEL/CentOS, I would suggest using RHEL/CentOS 7.0 (IPA 3.3.3) or RHEL/CentOS 
7.1 (IPA 4.1) when it is GA. (demo on ipa.demo1.freeipa.org)


--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go To http://freeipa.org for more info on the project

Re: [Freeipa-users] freeipa managed sudoers on Solaris 10

2015-01-19 Thread Murty, Ajeet (US - Arlington) 
We had to use OpenCSW packages.

run this on cmd-line -
  pkgadd -d http://get.opencsw.org/now
  /opt/csw/bin/pkgutil -y -i CSWbdb4 CSWcommon CSWlibnet CSWosslutils 
CSWsasl CSWsudo-common CSWsudoldap cswpki gcc4core gcc4g++ gmake libssl_dev 
openldap_client openldap_dev

optional one pkg at a time install -
  /opt/csw/bin/pkgutil -y -i CSWbdb4
  /opt/csw/bin/pkgutil -y -i CSWcommon
  /opt/csw/bin/pkgutil -y -i CSWlibnet
  /opt/csw/bin/pkgutil -y -i CSWosslutils
  /opt/csw/bin/pkgutil -y -i CSWsasl
  /opt/csw/bin/pkgutil -y -i CSWsudo-common
  /opt/csw/bin/pkgutil -y -i CSWsudoldap
  /opt/csw/bin/pkgutil -y -i cswpki


Ajeet Murty
Deloitte  Touche LLP
Tel: +1 571 882 5614 | Mobile: +1 704 421 8756
amu...@deloitte.commailto:amu...@deloitte.com | www.deloitte.com








This message (including any attachments) contains confidential information 
intended for a specific individual and purpose, and is protected by law. If you 
are not the intended recipient, you should delete this message and any 
disclosure, copying, or distribution of this message, or the taking of any 
action based on it, by you is strictly prohibited.

v.E.1



From: freeipa-users-boun...@redhat.com 
[mailto:freeipa-users-boun...@redhat.com] On Behalf Of Dmitri Pal
Sent: Monday, January 19, 2015 2:02 PM
To: freeipa-users@redhat.com
Subject: Re: [Freeipa-users] freeipa managed sudoers on Solaris 10

On 01/19/2015 01:50 PM, sipazzo wrote:
I am having trouble finding relevant documentation on using freeipa to manage 
sudoers for a Solaris client. Has anyone successfully set this up without 
adding a bunch of non-standard packages? I am running freeipa 3.0.0-42 and any 
help is appreciated.


AFAIR Solaris does not carry sudo packages so if you plan to use sudo you would 
need to get packages from upstream.
Other than that it is not different from using SUDO from a Linux client that 
does not have SSSD.



--

Thank you,

Dmitri Pal



Sr. Engineering Manager IdM portfolio

Red Hat, Inc.




-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go To http://freeipa.org for more info on the project

Re: [Freeipa-users] freeipa managed sudoers on Solaris 10

2015-01-19 Thread Dmitri Pal 

On 01/19/2015 01:50 PM, sipazzo wrote:
I am having trouble finding relevant documentation on using freeipa to 
manage sudoers for a Solaris client. Has anyone successfully set this 
up without adding a bunch of non-standard packages? I am running 
freeipa 3.0.0-42 and any help is appreciated.



AFAIR Solaris does not carry sudo packages so if you plan to use sudo 
you would need to get packages from upstream.
Other than that it is not different from using SUDO from a Linux client 
that does not have SSSD.


--
Thank you,
Dmitri Pal

Sr. Engineering Manager IdM portfolio
Red Hat, Inc.

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go To http://freeipa.org for more info on the project