When preparing for the Red Hat Certified Engineer certification examination, I came across this quote in my study notes about the sudo command.

By default, the policy is maintained as a flat text file, /etc/sudoers(although other, possibly remote, backend databases are also supported).

I have never heard of this piece of information until recently and a quick Google search does not turn up anything useful with regards to this.

Is this particular quote accurate? If so, how do I make the appropriate changes to configure sudo to use an alternative(presumably centralized) database for its policies?


sudo supports LDAP natively as a replacement for /etc/sudoers. It also has an API for third-party plugins, one of which (for Quest One) is listed on sudo's website.

| improve this answer | |

Sudo can be configured to use LDAP, which allows for distributed network based sudo configuration. The linked man page on the sudo website is quite detailed on the subject.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.