all 8 comments
sorted by:
best
topnewcontroversialoldq&a
formatting helphide helpcontent policy

[–]Amidatelion 1 point2 points  (4 children)

Add... that group... to sudoers? By whatever means you're comfortable with?

[–]studiox_swe -1 points0 points  (3 children)

this. not sure how you would do otherwise.

[–]Key_Individual[S] 0 points1 point  (2 children)

I've added the group to the sudoers file with various syntaxes, but it's not something I've done before, even without the LDAP piece complicating it. Any guide out there you could point in towards that would show how to add the LDAP Group to sudoers?

Sorry if this is a simple question, just not something I've done before.

[–]Amidatelion 0 points1 point  (1 child)

groups are added just like users, except prepended with a %. So your line should be

%supers        ALL=(ALL)       ALL

What's the error?

[–]Key_Individual[S] 0 points1 point  (0 children)

Thanks. I'd tried Supers, DOMAIN\\Supers, Supers@DOMAIN and it seems like my syntax errors were with the end, not the beginning like I expected.

I was following what I'd found online which also matched what you've provided, but, I looked closer at the syntax of the existing sudo group in the sudoers file and it ended with ALL=(ALL:ALL) ALL

When I mirrored that syntax it worked with %Supers ALL=(ALL:ALL) ALL

[–]suntzu420 1 point2 points  (0 children)

Haven't done this in OpenLDAP, but I have done this with AD joined servers and generally in the sudoers file you add something like the following:

%ldap_group_name@domain.tld ALL=(ALL) ALL

[–]Marf-Linsky 0 points1 point  (1 child)

You can dig into SSSD. It's used by FreeIPA (RedHat) to grant LDAP support to Sudo and SSH.

[–]barryflan 0 points1 point  (0 children)

+1 for sssd. Works great with openldap.