I'm stuck on getting sudoers access to work on the directory server. So far, I have done the following via the GUI:
Created a new ou called SUDOers under my main base dn
Under SUDOers OU, I created a new object sudorole via new–>other
Next I added 2 attributes to it, sudocommand, sudouser
on the client machine I put the following in /etc/ldap.conf:
sudoers_base ou=SUDOers,dc=bronto,dc=com
unfortunately, it doesn't seem to allow me to sudo anything. I turned on debug and got this output.
LDAP Config Summary
===================
uri ldap://eng1.bronto.com/
ldap_version 3
sudoers_base ou=SUDOers,dc=bronto,dc=com
binddn (anonymous)
bindpw (anonymous)
bind_timelimit 120000
timelimit 120
ssl start_tls
tls_cacertdir /etc/openldap/cacerts
===================
sudo: ldap_initialize(ld, ldap://eng1.bronto.com/)
sudo: ldap_set_option: debug -> 0
sudo: ldap_set_option: ldap_version -> 3
sudo: ldap_set_option: tls_cacertdir -> /etc/openldap/cacerts
sudo: ldap_set_option: timelimit -> 120
sudo: ldap_set_option(LDAP_OPT_NETWORK_TIMEOUT, 120)
sudo: ldap_start_tls_s() ok
sudo: ldap_simple_bind_s() ok
sudo: no default options found!
sudo: ldap search '(|(sudoUser=doug)(sudoUser=%users)(sudoUser=ALL))'
sudo: ldap search 'sudoUser=+*'
sudo: user_matches=0
sudo: host_matches=0
sudo: sudo_ldap_check(0)=0x44