Actions
action #23746
closedAdding sudoers rules to active directory.
Description
Like described in an "Linux Administrator Magazin" article we should add support for providing sudo rules to active directory.
Actions
Added by flacco over 6 years ago. Updated over 2 years ago.
Description
Like described in an "Linux Administrator Magazin" article we should add support for providing sudo rules to active directory.
Schema templates for sudo schema extension are ready and added to invis-setup package.
I have added a base-node for sudo-rules to AD: CN=Sudo-Rules,CN=invis-Server,dc=invis-net,dc=loc, and an example ldif for adding new sudo rules to AD.
Next steps are:
For Point 2: we have to extend the sssd.conf and the nsswitch.conf
sssd.conf:
services = nss, pam, sudo (in the global section)
nsswitch.conf:
New line:
sudoers: files sss
A first version of a script called sudorule2ad is ready an now part of the invis-server setup. It's now possible to sudo rules to ad.
Now we have to implement the client-site. Server an linux-clients inside an invis-server AD domain must look for sudo rules in the AD.
Erste Schritte erledigt und in 13.0 vorhanden, wird eventuell durch die inzwischen für Samba verfügbaren GPOs ersetzt. Dafür ggf. neues Ticket anlegen.