On 08/16/2012 12:21 AM, Nefi Munoz wrote:
Hi,
Is there an autoyast tag to add a sudoers line to /etc/ldap.conf file?
My customer tried adding this line to<ldap> section but this didn't work:
<sudoers_base>ou=sudoers,dc=HPC,dc=COMPANY,dc=COM</sudoers_base>
Below is the complete ldap section (I masked company name)
Thanks in advance,
Nefi M.
--------------------------- <ldap>
<base_config_dn>ou=ldapconfig,dc=HPC,dc=COMPANY,dc=COM</base_config_dn>
<bind_dn></bind_dn>
<create_ldap config:type="boolean">false</create_ldap>
<file_server config:type="boolean">false</file_server>
<ldap_domain>dc=HPC,dc=COMPANY,dc=COM</ldap_domain>
<ldap_server>server.hpc.COMPANY.com server.hpc.COMPANY.com</ldap_server>
<ldap_tls config:type="boolean">false</ldap_tls>
<ldap_v2 config:type="boolean">false</ldap_v2>
<login_enabled config:type="boolean">true</login_enabled>
<member_attribute>member</member_attribute>
<nss_base_group>ou=Group,dc=HPC,dc=COMPANY,dc=COM</nss_base_group>
<nss_base_passwd>ou=People,dc=HPC,dc=COMPANY,dc=COM</nss_base_passwd>
<nss_base_shadow>ou=People,dc=HPC,dc=COMPANY,dc=COM</nss_base_shadow>
<pam_password>exop</pam_password>
<start_autofs config:type="boolean">true</start_autofs>
<start_ldap config:type="boolean">true</start_ldap>
<tls_cacertdir>/etc/ssl/certs</tls_cacertdir>
<sudoers_base>ou=sudoers,dc=HPC,dc=COMPANY,dc=COM</sudoers_base>
</ldap> -----------------------------
Hi, autoYaST only can use tags it knows about. You can find those in /usr/share/YaST2/schema/autoyast/rnc/ldap_client.rnc I'm using a post-script to add additional nss_bases to /etc/ldap.conf, e.g.: #+begin_src sh !/bin/sh cat >> /etc/ldap.conf <<END # additional NSS Bases nss_base_aliases ou=Aliases,dc=example,dc=mpg,dc=com nss_base_netgroup ou=Netgroup,dc=example,dc=mpg,dc=com END #+end_src Take care to change the appropriate file(s) if you are using sssd! (Not sure about openSuSE 12.1, but 12.2 allows for using sssd instead of plain /etc/ldap.conf. In my autoyast.xml file I add a post-script in the scripts section: #+begin_example <scripts> <post-scripts config:type="list"> <script> <location>ftp://192.168.0.10/autoyast/ldap.sh</location> <filename>ldap.sh</filename> </script> </post-scripts> </scripts> #+end_example Best regards Robert -- Robert Klein - Max Planck-Institut für Polymerforschung Ackermannweg 10 55128 Mainz -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-autoinstall+owner@opensuse.org