Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When preparing for the Red Hat Certified Engineer certification examination, I came across this quote in my study notes about the sudo command.

By default, the policy is maintained as a flat text file, /etc/sudoers(although other, possibly remote, backend databases are also supported).

I have never heard of this piece of information until recently and a quick Google search does not turn up anything useful with regards to this.

Is this particular quote accurate? If so, how do I make the appropriate changes to configure sudo to use an alternative(presumably centralized) database for its policies?

share|improve this question

sudo supports LDAP natively as a replacement for /etc/sudoers. It also has an API for third-party plugins, one of which (for Quest One) is listed on sudo's website.

share|improve this answer

Sudo can be configured to use LDAP, which allows for distributed network based sudo configuration. The linked man page on the sudo website is quite detailed on the subject.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.