[sudo-users] Clarification on PAM

Jordi Espasa Clofent jespasac at minibofh.org
Mon May 3 03:22:49 EDT 2010


> I have my sudo configuration in LDAP. In order to utilize this config
> I was under the impression that the sudo application had to be built
> with the --with-ldap configure option per client.

Yep.

> But it seems that if my client sudo app is configured with --with-pam
> and my pam sudo file is setup correctly, it can also utilize the LDAP
> sudo configuration without being configured with --with-ldap.

It's not a  "configuration" issue,  it's a simple compilation/support issue.
Read carefully: http://www.gratisoft.us/sudo/readme_ldap.html

If you compile using '--with-ldap' option enabled you'll get LDAP 
support; if not, you won't. That's all.

You're missing some point, sure.

-- 
I must not fear. Fear is the mind-killer. Fear is the little-death that 
brings total obliteration. I will face my fear. I will permit it to pass 
over me and through me. And when it has gone past I will turn the inner 
eye to see its path. Where the fear has gone there will be nothing. Only 
I will remain.

Bene Gesserit Litany Against Fear.



More information about the sudo-users mailing list