sudo plugin for winbind.

Phil Lello phil at dunlop-lello.uk
Thu Jul 23 19:29:20 UTC 2015


Just a quick heads up, I'm looking into writing a sudo plugin for winbind
to allow sudo access for linux logins authenticated by pam_winbind. Has
anyone looked at this before, or is anyone actively working on this?

Standard sudo doesn't seem to work for pam_winbind accounts (failing with
"not in sudoers"), but even if it did, a more targetted AD/Samba solution
would be a useful option.

Just in case someone can shout out that I've misconfigured my system so
should feel less motivated, part of the oddity I'm seeing is:

DUNLOP-LELLO\phil at inferno:~$ id phil
uid=3000020(DUNLOP-LELLO\phil) gid=100(users)
groups=100(users),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),113(libvirtd),114(lpadmin),115(sambashare)
DUNLOP-LELLO\phil at inferno:~$ id
uid=3000020(DUNLOP-LELLO\phil) gid=100(users) groups=100(users),27(sudo)

Phil


More information about the samba-technical mailing list