Re: [Freeipa-users] sudo rules in IPA infrastructure

2012-05-21 Thread Jakub Hrozek
On Sat, May 19, 2012 at 03:11:44PM -0700, David Copperfield wrote: >Hi Jakub and Rich, >Got it. >Thanks a lot on the HBAC and sudoes maps access. I think I got confused >with the graph in the powerpoint > > presentation http://www.redhat.com/summit/2011/presentations/summit/what

Re: [Freeipa-users] sudo rules in IPA infrastructure

2012-05-19 Thread David Copperfield
turday, May 19, 2012 10:16 AM Subject: Re: [Freeipa-users] sudo rules in IPA infrastructure On Fri, May 18, 2012 at 02:35:18PM -0700, Gelen James wrote: >    Hi all, >    Are the sudo rules applied to IPA clients through nss_ldap, instead of >    sssd? Neither :-) sudo looks up

Re: [Freeipa-users] sudo rules in IPA infrastructure

2012-05-19 Thread Jakub Hrozek
On Fri, May 18, 2012 at 02:35:18PM -0700, Gelen James wrote: >Hi all, > Are the sudo rules applied to IPA clients through nss_ldap, instead of >sssd? Neither :-) sudo looks up the user information via the standard name-service-switch maps, so if your machine is configured to fetch us

Re: [Freeipa-users] sudo rules in IPA infrastructure

2012-05-18 Thread Gelen James
Hi Stephen,  That's very helpful. Thanks a lot. --Gelen From: Stephen Ingram To: Gelen James Cc: "freeipa-users@redhat.com" ; Rob Crittenden ; Rich Megginson Sent: Friday, May 18, 2012 2:58 PM Subject: Re: [Freeipa-users] sudo rules in IPA

Re: [Freeipa-users] sudo rules in IPA infrastructure

2012-05-18 Thread Stephen Ingram
On Fri, May 18, 2012 at 2:35 PM, Gelen James wrote: > Hi all, > >  Are the sudo rules applied to IPA clients through nss_ldap, instead of > sssd? > >  I tried that on Redhat 6.2 clients, and some documents said that sudo rules > would work when enabled inside /etc/nslcd.conf, but we need to hack t

[Freeipa-users] sudo rules in IPA infrastructure

2012-05-18 Thread Gelen James
Hi all,  Are the sudo rules applied to IPA clients through nss_ldap, instead of sssd?   I tried that on Redhat 6.2 clients, and some documents said that sudo rules would work when enabled inside /etc/nslcd.conf, but we need to hack the script /etc/init.d/nslcd.conf a little bit -- basically to