1

Allow sudo on specific file from active directory group

view story
linux-howto

http://askubuntu.com – I have an Ubuntu Server 12.04 box that has active directory integration running on it. I want to allow a certain active directory group access to execute a script as sudo. I want to do something like this: %programmers ALL=NOPASSWD: /usr/local/bin/createSambaShare.php When I log in with my active directory user and issue groups I do not see the group programmers, but I am a part of the programmers group within active directory. I've set up the group under the Unix attributes tab and given it an id of 1000 and added my user to it. My first thought was that I needed to add the group to (HowTos)

funckax's picture
Submitted by funckax on 10/11/2012

Stories similar to Allow sudo on specific file from active directory group

I'm trying to automate file sharing process and I started by creating some Active Directory groups for each permission:

USR_TEST_GROUP_RD, USR_TEST_GROUP_WR, USR_TEST_GROUP_FULL

I add some Active Directory users to those groups and added those 3 groups to the folder with their permissions but I keep gettng Access Denied message.

My problem is that I have a number of network administration applications like SAN switches that do not support nested groups from Active Directory Domain Services (AD DS).

We have an Active Directory 2003 domain with Windows XP workstations. Many settings on the workstations are configured and locked down via Active Directory domain group policy.

We need to send a few workstations to a remote office that does not have a domain controller or a connection to the domain.

I have a newly installed TFS 2012 server set up and I am having problems with the synchronisation of Windows Groups (AD Groups).

My domain is called DOMAINA and my service account for TFSAgentJob is DOMAINA\TFS-Service. I have verified with dsquery that the service account can access the Active Directory.

SIDs in Active Directory GPO 38 weeks 2 days ago

I am looking into some weird issues with active directory and group policy. This domain has been upgraded from windows NT and has had a few different administrators over the years. I am looking through the Default Domain group policy and Default Domain Controller group policy.

I have Active Directory setup on my 11.10 system and everything seemed to work just fine initially. Originally I had local accounts setup and one group that multiple users were tied to.

Configuring Active Directory Or LDAP Authentication And Defining User Or Group Based Access With SafeSquid

This tutorial explains how you can integrate an Active Directory or LDAP with SafeSquid for user authentication, and create granular user or group based access policies. This tutorial applies to both, Linux and Windows editions.

If you set the Manager for a User object in Active directory, it creates a clear relationship between the user and their manager. This is reported in Exchange's Global Address List amongst other things.

For a Group object, the Manager is able to edit members of the group via the Address List in Outlook, if you enable it.

The same Manager field exists for computer objects in Active Directory.

It's Test Day time again, folks. This Thursday, 2012-10-18, is Active Directory integration Test Day.