Sudo

nilecirb · 08-25-2006, 09:20 PM

For some reason, sudo does not recognize my Active Directory groups. Winbind (wbinfo, getent, and the such) works as intended, even returning the group in question. I even tried using one of the users from that Active Directory group, which sudo recognized without problems.

Basically,

Code:

%2007 ALL=(ALL) ALL

does not work, but

Code:

nilecirb ALL=(ALL) ALL

does. What could cause something like this to occur?

Thanks in advance,
nilecirb

UPDATE: Trying the primary group listed in getent passwd works, but does not achieve my ideal implementation. Has anyone gotten it working with secondary groups?

archtoad6 · 08-26-2006, 09:24 AM

What distro are you using?
Especially, is it one of the *buntu's?
Have you looked at this as a sudo problem?

nilecirb · 08-26-2006, 05:34 PM

Thanks for replying, archtoad6. As a matter of fact, it's running Kubuntu. It's definitely possible that sudo's the one causing all the problems, but how would I determine if that's the case? I just tested local secondary groups with sudo, and those work perfectly.

archtoad6 · 08-28-2006, 11:27 AM

One of the reasons that I don't (at least yet) run Kubuntu is the use of sudo rather than a properly set up root acct. As a result, I am probably not the best one to advise you.

If it's a Q of getting root privileges for a CLI command, try:

Code:

sudo su

or, if possible:

Code:

sudo su -

If it's a Q of a script not working, then setting up a root password might fix the problem:

Code:

sudo passwd

If none of this helps, try the Ubuntu forum or web site.

nilecirb · 08-28-2006, 11:09 PM

Quote:

Originally Posted by archtoad6

If it's a Q of getting root privileges for a CLI command, try:

Code:

sudo su

or, if possible:

Code:

sudo su -

The problem seems to lie more with sudo authentication than whatever command sudo tried to run. sudo <foo> does not work at all, whether <foo> is "su -" or any other command. My suspicions lean toward the way the sudo in Ubuntu's apt repository is configured. Anyone else have any ideas about the matter or have successfully authenticated with secondary AD groups using Ubuntu's sudo?