Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

When preparing for the Red Hat Certified Engineer certification examination, I came across this quote in my study notes about the sudo command.

By default, the policy is maintained as a flat text file, /etc/sudoers(although other, possibly remote, backend databases are also supported).

I have never heard of this piece of information until recently and a quick Google search does not turn up anything useful with regards to this.

Is this particular quote accurate? If so, how do I make the appropriate changes to configure sudo to use an alternative(presumably centralized) database for its policies?

share|improve this question
add comment

2 Answers

sudo supports LDAP natively as a replacement for /etc/sudoers. It also has an API for third-party plugins, one of which (for Quest One) is listed on sudo's website.

share|improve this answer
add comment

Sudo can be configured to use LDAP, which allows for distributed network based sudo configuration. The linked man page on the sudo website is quite detailed on the subject.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.