$ dpkg -l | grep sudo
rc sudo 1.7.0-1ubuntu2 Provide limited super user privileges to specific users
ii sudo-ldap 1.7.0-1ubuntu2 Provide limited super user privileges to specific users
$ sudo cat /etc/ldap/ldap.conf
BASE dc=multiexportfoods,dc=com
URI ldaps://fds.multiexportfoods.com:636
TLS_CACERT /etc/ssl/certs/ca-certificates.crt
TLS_REQCERT never
==============
$sudo -l
[sudo] password for victor:
Sorry, user victor may not run sudo on server.
==============
Nota.: changing the "sudoers_debug" option on /etc/ldap/ldap.conf to
sudoers_debug 2
sudoers_debug 5
sudoers_debug 20
sudoers_debug 50
no make differ !!! :(
on others words, debug not work.
more info:
the ldaps work fine, because I can authenticate users with it:
$getent passwd victor
victor:x:5555:55555:Victor Hugo dos Santos,,,:/home/victor:/bin/bash
I read notes that the problem is "only" with ldaps... and if I configure ldap (without SSL), so works !!!
but, in my company this isn't a option.
Hello,
we have the same problem here...
Configuration: RELEASE= 9.10 CODENAME= karmic DESCRIPTION= "Ubuntu 9.10"
=================
$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_
DISTRIB_
DISTRIB_
$ dpkg -l | grep sudo
rc sudo 1.7.0-1ubuntu2 Provide limited super user privileges to specific users
ii sudo-ldap 1.7.0-1ubuntu2 Provide limited super user privileges to specific users
$ sudo cat /etc/ldap/ldap.conf oods,dc= com /fds.multiexpor tfoods. com:636 certs/ca- certificates. crt
BASE dc=multiexportf
URI ldaps:/
TLS_CACERT /etc/ssl/
TLS_REQCERT never
sudoers_base ou=SUDOers, dc=multiexportf oods,dc= com
=================
running command "sudo -l" I have this output:
==============
$sudo -l
[sudo] password for victor:
Sorry, user victor may not run sudo on server.
==============
Nota.: changing the "sudoers_debug" option on /etc/ldap/ldap.conf to
sudoers_debug 2
sudoers_debug 5
sudoers_debug 20
sudoers_debug 50
no make differ !!! :(
on others words, debug not work.
more info:
the ldaps work fine, because I can authenticate users with it: x:5555: 55555:Victor Hugo dos Santos, ,,:/home/ victor: /bin/bash
$getent passwd victor
victor:
I read notes that the problem is "only" with ldaps... and if I configure ldap (without SSL), so works !!!
but, in my company this isn't a option.
saludos