Ok, so its working but I realized a slight problem today when went
back to check on things. Its not prompting for a password.
Sudoers isn't on NOPASSWD so I am assuming its my pam.d/sudo file.
What am I missing?
risk# cat /etc/pam.d/sudo
#
# $FreeBSD: src/etc/pam.d/su,v 1.16 2003/07/09 18:40:49 des Exp $
#
# PAM configuration for the "su" service
#
# auth
auth sufficient pam_rootok.so no_warn
auth sufficient pam_self.so no_warn
auth sufficient /usr/local/lib/pam_ldap.so no_warn
auth requisite pam_group.so no_warn
group=wheel root_only fail_safe
auth include system
# account
account sufficient /usr/local/lib/pam_ldap.so no_warn
account include system
# session
session sufficient /usr/local/lib/pam_ldap.so no_warn
session required pam_permit.so
Thanks
Jim
On 7/2/06, Dan Nelson <[EMAIL PROTECTED]> wrote:
In the last episode (Jul 02), ACM Staff said:
> Ok, so I am running a box with 6.0-STABLE
>
> Problem is I can't get sudo working for my LDAP based users. I
> compiled sudo from the ports tree with LDAP support. Here is some
> output
>
> as a user:
>
> [EMAIL PROTECTED]:~$ id notroot
> uid=2018(notroot) gid=200(acm) groups=200(acm), 203(officers),
> 201(staff), 204(staffers)
> [EMAIL PROTECTED]:~$ sudo ls
> Password:
> Sorry, try again.
Have you created a pam.d/sudo file, or edited your pam.d/other file to
include pam_ldap.so? I recommend copying the pam.d/su file, then
editing pam.d/system to include pam_ldap.so.
--
Dan Nelson
[EMAIL PROTECTED]
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
