[sudo-users] SudoUsers matching regardless of netgroup

Todd C. Miller Todd.Miller at courtesan.com
Tue Dec 3 09:42:18 MST 2013


The sssd backend doesn't use ldap.conf.  You can add a line like
this to /etc/sudo.conf:

Debug sudo /var/log/sudo_debug sssd at debug,ldap at debug

which will write sssd and ldap debug output to /var/log/sudo_debug.
>From a quick check of the sssd code, I don't actually see support
for matching a user by netgroup, only hosts and runas users.

Do the schoure and mchoure accounts have distinct uidnumbers?

 - todd


More information about the sudo-users mailing list