I managed to get an authentication through ldap on my SLES 12 machine, but I can't set a certain group as sudoers. My suders entry looks as follows:
%LNX-ADMIN-vibe3 ALL=(ALL) NOPASSWD:ALL
But all I get when trying
sudo su is
*Username* is not in the sudoers file. This incident will be reported.
I tried set the
sudoers: files sss but then the error message changes:
*Username* is not allowed to run sudo on *Servername*. This incident will be reported.
So I also tried adding following attributes to my LDAP Group
cn=LNX-ACCESS-vibe3 object Class sudoRole sudeCommand ALL sudoHost ALL sudo user %LNX-ACCESS-vibe3
But still no effect. I think the
nsswitch.conf is the one controlling the location from with the
sudoers file is getting his information. So currently its set to ldap so it accesses the
ldap.conf file. If any further information about the LDAP tree is required, please ask.