When preparing for the Red Hat Certified Engineer certification examination, I came across this quote in my study notes about the sudo command.

By default, the policy is maintained as a flat text file, /etc/sudoers(although other, possibly remote, backend databases are also supported).

I have never heard of this piece of information until recently and a quick Google search does not turn up anything useful with regards to this.

Is this particular quote accurate? If so, how do I make the appropriate changes to configure sudo to use an alternative(presumably centralized) database for its policies?

2 Answers 2


sudo supports LDAP natively as a replacement for /etc/sudoers. It also has an API for third-party plugins, one of which (for Quest One) is listed on sudo's website.


Sudo can be configured to use LDAP, which allows for distributed network based sudo configuration. The linked man page on the sudo website is quite detailed on the subject.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .