[sudo-users] Sudo LDAP : More than one command in sudoCommand

Gregory Charot gcharot at evenium.com
Wed May 7 09:38:38 MDT 2014


Hello,

I have successfully deployed sudo over LDAP, and it is working fine. 
Thanks for the good work !

I'd like to know if it possible to specify more than one command in the 
sudoCommand parameter

This is working :

dn: cn=sudo_zabbix_test,ou=Sudoers,dc=xxx,dc=com
objectClass: top
objectClass: sudoRole
cn: sudo_zabbix_test
sudoUser: zabbix
sudoHost: ALL
*sudoCommand: /usr/java/default/bin/jps*
sudoOption: !authenticate
sudoOption: !requiretty
sudoRunAs: root


This is _not_ working :

dn: cn=sudo_zabbix_test,ou=Sudoers,dc=xxx,dc=com
objectClass: top
objectClass: sudoRole
cn: sudo_zabbix_test
sudoUser: zabbix
sudoHost: ALL
*sudoCommand: /usr/java/default/bin/jps, /sbin/mii-tool*
sudoOption: !authenticate
sudoOption: !requiretty
sudoRunAs: root

How can I set multiple commands in a single ldap entry ? I would like to 
avoid using one entry per command.

Thanks in advance,
Greg


More information about the sudo-users mailing list