[sudo-users] Sudoers on LDAP for RHEL6

[Todd C. Miller]

On Sun, 08 May 2011 15:22:27 +0300, avigdor wrote:

> I have sudoers on LDAP for RHEL5, and it's working fine. My server is
> OpenLDAP on RHEL4, still.
> 
> I'm trying to configure RHEL6 to work with LDAP, as client, but I don't
> succeed.
> It works fine with the sudoers file.
> I configured the /etc/ldap.conf, even though ldap client is not using it,
> for sudo.
> I checked /etc/pam.d/sudo, that seems to be fine, no change done.
> I configures /etc/nsswitch.conf

You should add the following line to /etc/ldap.conf:

sudoers_debug 2

that should cause sudo to print debugging info when it tries to
connect to LDAP and may point you in the right direction.

 - todd