search for: sudo_us

Hi everyone i wish to add the Microsoft Active Directory schema from the sudo package to my samba4 ADC, from what i have researched this is what i should do, the Microsoft Active Directory schema and the instructions are from the sudo package, the sudo_user file is an example from the man page. ldbadd -H /etc/samba/private/sam.ldb \ schema.ActiveDirectory \ --option="dsdb:schema update allowed"=true does the schema need any modifications before i add it to samba? The following example allows users in group wheel to run any c...

...a server, then, it doesn't matter if I su - or sudo -s, I start a service (motion, if it matters), and when the service sends an email, it's from me, not from root, or the user the service runs as. I've dumped my environment, I've just dumped service's environment. I've set SUDO_USER to root, and SUDO_UID to 0, and restarted the service, and still no joy. My manager found this trick: echo "To: user help " | sendmail -t and the same thing happens. Anyone else run into this? No relevant google hits so far. mark

...cumented, libvirtd can be accessed only through root user or users from libvirtd usergroup. is there any tweak or possibility to access libvirt remotely through sudo user? or by using certificate? code snippet: #!/usr/bin/env python import sys import libvirt conn = libvirt.open('xen+ssh://sudo_user@xen_server')  <== Trying to establish connection to the remote xen using sudo user. if conn == None:     print('Failed to open connection to xen+ssh:xen_server')     exit(1) host = conn.getHostname() print('Hostname:'+host) conn.close() exit(0)

...builds and tests software in this context, has NO writable home directory, so all of the tests immediately fail in ugly ways. What am I missing here? Is there some way to pass a different $HOME (such as /tmp/ or /var/empty) prior to running the tests? Or specify a different user to run them as? ($SUDO_USER in our case). I tried the obvious "HOME=/tmp/ make tests", but that fails, as does other similar methods. Short of tricking the tree with LD_PRELOAD or similar hacks, what is the best way to solve this problem? Thanks in advance. David A. Desrosiers e: desrod at gnu-designs.com p: 8...

...5(operator) $ sudo env USER=root MAIL=/var/mail/backup HOME=/home/backup PAGER=more TERM=xterm BLOCKSIZE=K PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/games:/usr/local/sbin:/usr/local/bin:/usr/X11R6/bin:/home/backup/bin SHELL=/bin/sh FTP_PASSIVE_MODE=YES EDITOR=vi LOGNAME=root SUDO_COMMAND=/usr/bin/env SUDO_USER=backup SUDO_UID=1005 SUDO_GID=1005 So, sudo'ing is setting up the environment just fine for any other command, rsync shouldn't make a difference. Rsync even shows the directory in the listing if I just run rsync to get a listing of the module: drwx------ 512 2004/06/24 09:27:43 i...

...the uid/gid the daemon itself will switch to before beginning communication with clients. These parameters can improve security. For example, using daemon via a restricted remote-shell connection, for security reasons, if we want whole rsync to be chrooted, we can now use : daemon chroot = /home/%SUDO_USER%/rsync/ daemon uid = %SUDO_UID% daemon gid = %SUDO_GID% With of course rsync being sudo-called by the restricted shell (to configure properly). We could already do this without this patch, using the "use chroot" parameter, but then the daemon itself is not chrooted and remains run by...

.../bin:/bin:/usr/sbin:/sbin:/opt/ssh/bin LOGNAME=root MAIL=/var/mail/tinsless USER=root SHELL=/usr/bin/ksh HOME=/nfs/home/tinsless SSH_CLIENT=172.16.208.14 65476 22 SSH_CONNECTION=172.16.208.14 65476 172.16.208.41 22 PWD=/nfs/home/tinsless TZ=EST5EDT TERM=unknown SUDO_COMMAND=/usr/bin/env SUDO_USER=tinsless SUDO_UID=320 SUDO_GID=200 uid=0(root) gid=3(sys) groups=0(root),1(other),2(bin),4(adm),5(daemon),6(mail),7(lp),20(users)

..."--numeric-ids", "--delete", "--delete-after", "-ax", "root@moniscreen:/", "/tftpboot/moniscreen"], ["SHELL=/bin/bash", "TERM =screen", "USER=root", "http_proxy=http://proxy.kurp.hut.fi:3128/", "SUDO_USER=lindi", "SUDO_UID=548", "ftp_proxy=http://proxy.kurp.hut.fi:3128/", "PATH=/usr/local/sb in:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/X11R6/bin"..., "PWD=/root", "EDITOR=/home/lindi/bin/editor", "SHLVL=1", "SUDO_COMMAND=...

...ebug2: channel 2: request env confirm 0 debug1: Sending env LC_CTYPE = C debug2: channel 2: request env confirm 0 debug3: Ignored env SHELL debug3: Ignored env LOGNAME debug3: Ignored env USER debug3: Ignored env USERNAME debug3: Ignored env MAIL debug3: Ignored env SUDO_COMMAND debug3: Ignored env SUDO_USER debug3: Ignored env SUDO_UID debug3: Ignored env SUDO_GID debug3: Ignored env SHLVL debug3: Ignored env PWD debug3: Ignored env OLDPWD debug3: Ignored env mapfile debug3: Ignored env HISTFILE debug3: Ignored env HISTSIZE debug3: Ignored env SAVEHIST debug3: Ignored env PAGER debug3: Ignored env E...

Fancy, while not fun. :-) But thanks, that does work. Doing that, n?ing over calls to strcmp, it failed: passdbs_init () at passdb.c:313 313 passdb_register_module(&passdb_ldap); (gdb) passdb_register_module (iface=0x280120) at passdb.c:33 33 old_iface = passdb_interface_find(iface->name); (gdb) passdb_interface_find (name=0x16fe60 "ldap") at passdb.c:20 20