#3145 Update sssd-sudo man page to reflect native sudo support
Closed: Fixed Opened by jstephen.

later versions of sssd no longer require the compat tree for sudo functionality, the man page should be updated to indicate this:

# man sssd-sudo
CONFIGURING SSSD TO FETCH SUDO RULES
...
       The following example shows how to configure SSSD to download sudo rules from an LDAP server.
           [sssd]
           config_file_version = 2
           services = nss, pam, sudo
           domains = EXAMPLE
           [domain/EXAMPLE]
           id_provider = ldap
           sudo_provider = ldap
           ldap_uri = ldap://example.com
           ldap_sudo_search_base = ou=sudoers,dc=example,dc=com
       When the SSSD is configured to use IPA as the ID provider, the sudo provider is automatically enabled. The sudo search base is configured to use the compat tree (ou=sudoers,$DC).

Fields changed

description: later versions of sssd no longer require the compat tree for sudo functionality, the man page should be updated to indicate this:

{{{

man sssd-sudo

CONFIGURING SSSD TO FETCH SUDO RULES

When the SSSD is configured to use IPA as the ID provider, the sudo provider is automatically enabled. The sudo search base is configured to use the compat tree (ou=sudoers,$DC).
}}}
=> later versions of sssd no longer require the compat tree for sudo functionality, the man page should be updated to indicate this:

{{{

man sssd-sudo

CONFIGURING SSSD TO FETCH SUDO RULES

...

   The following example shows how to configure SSSD to download sudo rules from an LDAP server.
       [sssd]
       config_file_version = 2
       services = nss, pam, sudo
       domains = EXAMPLE
       [domain/EXAMPLE]
       id_provider = ldap
       sudo_provider = ldap
       ldap_uri = ldap://example.com
       ldap_sudo_search_base = ou=sudoers,dc=example,dc=com
   When the SSSD is configured to use IPA as the ID provider, the sudo provider is automatically enabled. The sudo search base is configured to use the compat tree (ou=sudoers,$DC).

}}}

I am fine to work on this if someone can please recommend how the wording should be changed here

Fields changed

keywords: => easyfix
owner: somebody => jstephen
status: new => assigned

I think we already have a patch on sssd-devel for this ticket. The patch is hanging there for some time.

https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org/thread/26OJVCDJY3GFDZHVKFAQHUC3P7RNQNTC/#XHH4H6L6VMDAEV45HF5544KP6PX3SKHE

Justin, feel free to rework/change Pavel's patch or if you like it as-is, just ack it. In the meantime, I'm filing the ticket to 1.14.2.

milestone: NEEDS_TRIAGE => SSSD 1.14.2

Fields changed

rhbz: => todo

master:

  • 72bab5640b3ec57950b53dad0fb3042ea563592c

sssd-1-13:

  • a14547beaf0112123c33759c9b8264a1b58c6fa4

resolution: => fixed
status: assigned => closed

Metadata Update from @jstephen:
- Issue assigned to jstephen
- Issue set to the milestone: SSSD 1.14.2

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4178

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata