[sudo-users] sudo-ldap and tls

guildivernos guildivernos guildivernos at gmail.com
Thu May 11 15:24:36 EDT 2006


I'm traing to use sud-ldap whith tls support. Sudo-ldap works if not using
tls. ldap woks fine wiht tls. Also pam and nss works with ldap and tls.

ldap.conf:
---------------------------------------------------------
BASE            dc=test,dc=com
URI             ldaps://10.10.10.1:636
TLS_REQCERT     allow

# must be set or sudo will ignore LDAP
sudoers_base   ou=sudoers,dc=test,dc=com
sudoers_debug 2
-------------------------------------------------------------


# sudo -l

LDAP Config Summary
===================
uri          ldaps://10.10.10.1:636
ldap_version 3
sudoers_base ou=sudoers,dc=test,dc=com
binddn       (anonymous)
bindpw       (anonymous)
ssl          (no)
===================
ldap_set_option(LDAP_OPT_X_TLS_REQUIRE_CERT,0x00)
ldap_initialize(ld,ldaps://10.10.10.1:636)
ldap_set_option(LDAP_OPT_PROTOCOL_VERSION,0x03)
ldap_simple_bind_s()=81 : Can't contact LDAP server
User root may run the following commands on this host:
    (ALL) ALL



please help !!



More information about the sudo-users mailing list