[sudo-users] sudo_logsrvd as an LDAP attribute

Todd C. Miller Todd.Miller at sudo.ws
Wed May 27 16:24:25 MDT 2020


On Wed, 27 May 2020 14:26:24 -0700, patrick.hush at comcast.net wrote:

> I've poked about but not found any answers. We have the sudo schema
> loaded in ldap and leverage the central policy management via LDAP.
> Is there any plan to add this functionality to sudo_logsrvd?
> It would be great to leverage our LDAP/Sudo environment.

You should be able to set log_servers in the LDAP version of sudoers
too, though I haven't tested that configuration.  I think you can
just add:

sudoOption: log_servers=hostname(tls)

to the global defaults sudoRole.

Or do you mean something else?

 - todd


More information about the sudo-users mailing list