Sudo - Revision history

Jciccone: /* Configuring */

2009-03-22T21:10:47Z

Configuring

← Older revision		Revision as of 21:10, 22 March 2009
Line 116:		Line 116:
	If you havn't already created a OU dedicated to sudo rules now would be the time to create it:		If you havn't already created a OU dedicated to sudo rules now would be the time to create it:

	ldapadd -x -D "cn=Manager,<BASE DN>" -W << EOF		ldapadd -x -D "cn=Manager,'''''<BASE DN>'''''" -W << EOF
	dn: ou=Sudoers,''<BASE DN>''		dn: ou=Sudoers,'''''<BASE DN>'''''
	objectClass: top		objectClass: top
	objectClass: organizationalUnit		objectClass: organizationalUnit
Line 127:		Line 127:
	cat >> /etc/ldap.conf << "EOF"		cat >> /etc/ldap.conf << "EOF"
	# Sudo Section		# Sudo Section
	sudoers_base ou=Sudoers,''<BASE DN>''		sudoers_base ou=Sudoers,'''''<BASE DN>'''''
	EOF		EOF

Line 133:		Line 133:

	cat > temp.ldif << "EOF"		cat > temp.ldif << "EOF"
	dn: cn=''<username>''+sudoCommand=ALL+sudoHost=''<hostname>/ALL''+sudoRunAs=root,ou=Sudoers,''<BASE DN>''		dn: cn='''''<username>'''''+sudoCommand=ALL+sudoHost='''''<hostname>/ALL'''''+sudoRunAs=root,ou=Sudoers,'''''<BASE DN>'''''
	sudoHost: ''<hostname>/ALL''		sudoHost: '''''<hostname>/ALL'''''
	sudoCommand: ALL		sudoCommand: ALL
	objectClass: sudoRole		objectClass: sudoRole
	objectClass: top		objectClass: top
	sudoUser: ''<username>''		sudoUser: '''''<username>'''''
	sudoRunAs: root		sudoRunAs: root
	cn: ''<username>''		cn: '''''<username>'''''
	EOF		EOF

	Then import it into the directory:		Then import it into the directory:

	ldapadd -f temp.ldif -x -D "cn=Manager,<BASE DN>" -W		ldapadd -f temp.ldif -x -D "cn=Manager,'''''<BASE DN>'''''" -W

	== Content ==		== Content ==

Jciccone at 17:53, 7 March 2009

2009-03-07T17:53:50Z

← Older revision		Revision as of 17:53, 7 March 2009
Line 25:		Line 25:

	== Non-Multilib ==		== Non-Multilib ==


	Compile the package:		Compile the package:
Line 90:		Line 89:
	sed "s/su$/&do/" /etc/pam.d/su > /etc/pam.d/sudo		sed "s/su$/&do/" /etc/pam.d/su > /etc/pam.d/sudo
	fi		fi


	== Configuring ==		== Configuring ==
Line 104:		Line 102:
	=== LDAP Configuration ===		=== LDAP Configuration ===

	This is an alternative to /etc/sudoers.		This is an alternative to /etc/sudoers. You can use both at the same time.

			In order for Sudo to look in ldap we need to put an entry in nsswitch.conf:

			cat >> /etc/nsswitch.conf << "EOF"
			# Begin Sudo Additions to /etc/nsswitch.conf

			sudoers: files ldap

			# End Sudo Additions to /etc/nsswitch.conf
			EOF

	If you havn't already created a OU dedicated to sudo rules now would be the time to create it:		If you havn't already created a OU dedicated to sudo rules now would be the time to create it:

Jciccone at 00:34, 17 February 2009

2009-02-17T00:34:43Z

← Older revision		Revision as of 00:34, 17 February 2009
Line 13:		Line 13:
	===Recomended===		===Recomended===
	* [[Linux-PAM]]		* [[Linux-PAM]]
	* [[OpenLDAP]]

	===Optional===		===Optional===
	[[~~Selinux~~]]		* [[OpenLDAP]]
			* [[SELinux]]

	== Configuration Information ==		== Configuration Information ==

Animeloe at 00:01, 17 February 2009

2009-02-17T00:01:21Z

← Older revision		Revision as of 00:01, 17 February 2009
Line 12:		Line 12:

	===Recomended===		===Recomended===
	[[Linux-PAM]]		* [[Linux-PAM]]
			* [[OpenLDAP]]

	===Optional===		===Optional===

Jciccone: /* LDAP Configuration */

2008-11-16T05:52:10Z

LDAP Configuration

← Older revision		Revision as of 05:52, 16 November 2008
Line 102:		Line 102:

	=== LDAP Configuration ===		=== LDAP Configuration ===

			This is an alternative to /etc/sudoers.

	If you havn't already created a OU dedicated to sudo rules now would be the time to create it:		If you havn't already created a OU dedicated to sudo rules now would be the time to create it:

Jciccone: /* LDAP Configuration */

2008-11-16T05:51:42Z

LDAP Configuration

@@ Line 118: / Line 118: @@
   sudoers_base       ou=Sudoers,''<BASE DN>''
   EOF
 == Content ==

Jciccone: /* LDAP Configuration */

2008-11-16T05:38:00Z

LDAP Configuration

← Older revision		Revision as of 05:38, 16 November 2008
Line 110:		Line 110:
	objectClass: organizationalUnit		objectClass: organizationalUnit
	ou: Sudoers		ou: Sudoers
			EOF

			If you havn't already created /etc/ldap.conf from the [[nss_ldap]] page create it now then append the following line for Sudo:

			cat >> /etc/ldap.conf << "EOF"
			# Sudo Section
			sudoers_base ou=Sudoers,''<BASE DN>''
	EOF		EOF

Jciccone: /* Configuring */

2008-11-16T05:35:14Z

Configuring

← Older revision		Revision as of 05:35, 16 November 2008
Line 100:		Line 100:

	For more options, read the config file, and the man pages.....		For more options, read the config file, and the man pages.....

			=== LDAP Configuration ===

			If you havn't already created a OU dedicated to sudo rules now would be the time to create it:

			ldapadd -x -D "cn=Manager,<BASE DN>" -W << EOF
			dn: ou=Sudoers,''<BASE DN>''
			objectClass: top
			objectClass: organizationalUnit
			ou: Sudoers
			EOF

	== Content ==		== Content ==

Bigdissaved: Added configing to page (visudo)

2008-07-06T04:51:30Z

Added configing to page (visudo)

@@ Line 89: / Line 89: @@
     sed "s/su$/&do/" /etc/pam.d/su > /etc/pam.d/sudo
   fi
 == Content ==

Jciccone at 01:35, 6 July 2008

2008-07-06T01:35:58Z

← Older revision		Revision as of 01:35, 6 July 2008
Line 24:		Line 24:

	== Non-Multilib ==		== Non-Multilib ==


	Compile the package:		Compile the package:
Line 118:		Line 119:
	\| enables support for the "noexec" functionality which prevents a dynamically-linked program being run by sudo from executing another program (think shell escapes).		\| enables support for the "noexec" functionality which prevents a dynamically-linked program being run by sudo from executing another program (think shell escapes).
	\|}		\|}

			[[Category:Security]]