mir/sudo
2
0
Fork 0
mirror of https://github.com/sudo-project/sudo.git synced 2025-08-29 13:28:10 +00:00
Code Issues Releases Wiki Activity

Mention rootbinddn

Browse Source 
Give example ou=SUDOers container
This commit is contained in:
Todd C. Miller 2005-06-26 22:36:09 +00:00
parent 3b30d7514a
commit 69be475791
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
README.LDAP
View File

@ -12,6 +12,8 @@ Some have attempted to workaround this by synchronizing changes via
RCS/CVS/RSYNC/RDIST/RCP/SCP and even NFS. Many have asked for a Hesiod, NIS, RCS/CVS/RSYNC/RDIST/RCP/SCP and even NFS. Many have asked for a Hesiod, NIS,
or LDAP patch for sudo, so here is my attempt at LDAP'izing sudo. or LDAP patch for sudo, so here is my attempt at LDAP'izing sudo.
For information on OpenLDAP, please see http://www.openldap.org/.
Definitions Definitions
=========== ===========
Many times the word 'Directory' is used in the document to refer to the LDAP Many times the word 'Directory' is used in the document to refer to the LDAP
@ -186,6 +188,14 @@ Importing is a two step process.
Step 1: Step 1:
Ask your LDAP Administrator where to create the ou=SUDOers container. Ask your LDAP Administrator where to create the ou=SUDOers container.
For instance, if using OpenLDAP:
dn: ou=SUDOers,dc=example,dc=com
objectClass: top
objectClass: organizationalUnit
ou: SUDOers
(An example location is shown below). Then use the provided script to convert (An example location is shown below). Then use the provided script to convert
your sudoers file into LDIF format. The script will also convert any default your sudoers file into LDIF format. The script will also convert any default
options. options.
@ -258,6 +268,7 @@ when you imported the sudoers. Below is an example /etc/ldap.conf
# optional proxy credentials # optional proxy credentials
#binddn <who to search as> #binddn <who to search as>
#bindpw <password> #bindpw <password>
#rootbinddn <who to search as, uses /etc/ldap.passwd for bindpw>
# #
# LDAP Protocol Version defaults to 3 # LDAP Protocol Version defaults to 3
#ldap_version 3 #ldap_version 3