sudo and pam_winbind

Phil Lello <[email protected]>
Newsgroups gmane.comp.tools.sudo.devel
Message-ID <CAPofZaHgwYXhtigrqrKUdsonKgAtDBSTWuya4Zn14-nrekUwUw@mail.gmail.com>
Hi all,

I'm currently experimenting with samba4 as an AD DC controller, and am
using pam_winbind for local user authentication.

For a samba4 account, id returns:
uid=3000020(DUNLOP-LELLO\phil) gid=100(users) groups=100(users)

/etc/group currently contains:
sudo:x:27:phil,DUNLOP-LELLO\phil

id phil returns:
uid=3000020(DUNLOP-LELLO\phil) gid=100(users)
groups=100(users),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),113(libvirtd),114(lpadmin),115(sambashare)

Oddly, just id (loggen in as phil via ssh) returns:
uid=3000020(DUNLOP-LELLO\phil) gid=100(users) groups=100(users)

Does this point at misconfiguration (e.g. something missing in Ubuntu
14.04's /etc/pam.d), a samba bug, a sudo bug, or an opportunity to write a
sudo plugin that plays nicely with winbind?

I'm happy to work on a fix for sudo in either of the latter 2 cases,
although would a pam_winbind plugin be better handled under the sudo or
samba4 projects?

Phil
____________________________________________________________
sudo-workers mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
http://www.sudo.ws/mailman/listinfo/sudo-workers
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.