KB-0382: syntax for entering ALL keyword using Centrify sudoers GP template.

Home >

KB-0382: syntax for entering ALL keyword using Centrify sudoers GP template.

Product:

Centrify DirectControl ,

Published:

28 October,13 at 12:51 PM

Rating:

Question:

What's the correct syntax for entering ALL keyword using Centrify sudoers GP template. If the syntax is not correct, the GP will not make into /etc/sudoers file on the UNIX/Linux host.

Answer:

If you want to have the following sudo entries to be made into /etc/sudoers via Centrify sudoers gp template: e.g.,

1) %wheel ALL=(ALL) NOPASSWD: ALL
2) erica ALL=(ALL) ALL
3) tom ALL=(ALL) NOPASSWD: ALL

For Example 1: In the sudoers GP in the Computer Configuration section:
Enter into the first field: %wheel
Enter into the second field: (ALL) NOPASSWD: ALL

Similarly for Example 3: In the sudoers GP in the Computer Configuration section:
Enter into the first field: tom
Enter into the second field: (ALL) NOPASSWD: ALL

Once you have the correct syntax in place the above GP will show up in /etc/sudoers as follows:
1) %wheel rhel=(ALL) NOPASSWD: ALL
2) erica rhel=(ALL) ALL
3) tom rhel=(ALL) NOPASSWD: ALL

The first "ALL" will replaced with hostname dynamically which is not wrong.