#3145 Update sssd-sudo man page to reflect native sudo support
Closed: Fixed None Opened 2 years ago by jstephen.

later versions of sssd no longer require the compat tree for sudo functionality, the man page should be updated to indicate this:

# man sssd-sudo
CONFIGURING SSSD TO FETCH SUDO RULES

...

       The following example shows how to configure SSSD to download sudo rules from an LDAP server.

           [sssd]
           config_file_version = 2
           services = nss, pam, sudo
           domains = EXAMPLE

           [domain/EXAMPLE]
           id_provider = ldap
           sudo_provider = ldap
           ldap_uri = ldap://example.com
           ldap_sudo_search_base = ou=sudoers,dc=example,dc=com

       When the SSSD is configured to use IPA as the ID provider, the sudo provider is automatically enabled. The sudo search base is configured to use the compat tree (ou=sudoers,$DC).

Fields changed

description: later versions of sssd no longer require the compat tree for sudo functionality, the man page should be updated to indicate this:

{{{

man sssd-sudo

CONFIGURING SSSD TO FETCH SUDO RULES

When the SSSD is configured to use IPA as the ID provider, the sudo provider is automatically enabled. The sudo search base is configured to use the compat tree (ou=sudoers,$DC).
}}}
=> later versions of sssd no longer require the compat tree for sudo functionality, the man page should be updated to indicate this:

{{{

man sssd-sudo

CONFIGURING SSSD TO FETCH SUDO RULES

...

   The following example shows how to configure SSSD to download sudo rules from an LDAP server.

       [sssd]
       config_file_version = 2
       services = nss, pam, sudo
       domains = EXAMPLE

       [domain/EXAMPLE]
       id_provider = ldap
       sudo_provider = ldap
       ldap_uri = ldap://example.com
       ldap_sudo_search_base = ou=sudoers,dc=example,dc=com

   When the SSSD is configured to use IPA as the ID provider, the sudo provider is automatically enabled. The sudo search base is configured to use the compat tree (ou=sudoers,$DC).

}}}

I am fine to work on this if someone can please recommend how the wording should be changed here

Fields changed

keywords: => easyfix
owner: somebody => jstephen
status: new => assigned

Justin, feel free to rework/change Pavel's patch or if you like it as-is, just ack it. In the meantime, I'm filing the ticket to 1.14.2.

milestone: NEEDS_TRIAGE => SSSD 1.14.2

Fields changed

rhbz: => todo

master:

sssd-1-13:

resolution: => fixed
status: assigned => closed

Metadata Update from @jstephen:
- Issue assigned to jstephen
- Issue set to the milestone: SSSD 1.14.2

2 years ago

Login to comment on this ticket.

Metadata