[Samba] howto install sudo schema

shadrock uhuru niyalevi at gmail.com
Tue Aug 12 18:28:23 MDT 2014

Hi everyone

i wish to add the Microsoft Active Directory schema from the sudo
package to my samba4 ADC,
from what i have researched this is what i should do,
the Microsoft Active Directory schema and the instructions are from the
sudo package,
the sudo_user file is an example from the man page.

ldbadd -H /etc/samba/private/sam.ldb \
      schema.ActiveDirectory \
      --option="dsdb:schema update allowed"=true

does the schema need any modifications before i add it to samba?

The following example allows users in group wheel to run any command on
any host via sudo,
dc=example,dc=com will be changed to refer to my domain.

$ cat sudo_user

    dn: cn=%wheel,ou=SUDOers,dc=example,dc=com
    objectClass: top
    objectClass: sudoRole
    cn: %wheel
    sudoUser: %wheel
    sudoHost: ALL
    sudoCommand: ALL

ldbadd -H /etc/samba/private/sam.ldb sudo_user \
      --option="dsdb:schema update allowed"=true

and how do i index the 'sudoUser' attribute?
all corrections welcome.


More information about the samba mailing list