sudo and pam_winbind
Phil Lello <[email protected]>
| Newsgroups | gmane.comp.tools.sudo.devel |
|---|---|
| Message-ID | <CAPofZaHgwYXhtigrqrKUdsonKgAtDBSTWuya4Zn14-nrekUwUw@mail.gmail.com> |
Hi all, I'm currently experimenting with samba4 as an AD DC controller, and am using pam_winbind for local user authentication. For a samba4 account, id returns: uid=3000020(DUNLOP-LELLO\phil) gid=100(users) groups=100(users) /etc/group currently contains: sudo:x:27:phil,DUNLOP-LELLO\phil id phil returns: uid=3000020(DUNLOP-LELLO\phil) gid=100(users) groups=100(users),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),113(libvirtd),114(lpadmin),115(sambashare) Oddly, just id (loggen in as phil via ssh) returns: uid=3000020(DUNLOP-LELLO\phil) gid=100(users) groups=100(users) Does this point at misconfiguration (e.g. something missing in Ubuntu 14.04's /etc/pam.d), a samba bug, a sudo bug, or an opportunity to write a sudo plugin that plays nicely with winbind? I'm happy to work on a fix for sudo in either of the latter 2 cases, although would a pam_winbind plugin be better handled under the sudo or samba4 projects? Phil ____________________________________________________________ sudo-workers mailing list <[email protected]> For list information, options, or to unsubscribe, visit: http://www.sudo.ws/mailman/listinfo/sudo-workers