Re: LDAP defaults for commands

"Todd C. Miller" <[email protected]>
Newsgroups gmane.comp.tools.sudo.user
Message-ID <[email protected]> 
The sudoers LDAP configuration handles the Defaults options
differently.  There is no way to specify a set of options that are
always applied to a user.  Instead, you specify the options inside
the sudoRole object for that user or group.

For example:

# millert, SUDOers, courtesan.com
dn: cn=millert,ou=SUDOers,dc=courtesan,dc=com
objectClass: top
objectClass: sudoRole
cn: millert
sudoUser: millert
sudoRunAsUser: ALL
sudoRunAsGroup: ALL
sudoHost: ALL
sudoOption: !authenticate

would allow user millert to execute any command without authenticating.

 - todd
____________________________________________________________
sudo-users mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.