KB-0382: syntax for entering ALL keyword using Centrify sudoers GP template.
Question:
What's the correct syntax for entering ALL keyword using Centrify sudoers GP template. If the syntax is not correct, the GP will not make into /etc/sudoers file on the UNIX/Linux host.
Answer:
If you want to have the following sudo entries to be made into /etc/sudoers via Centrify sudoers gp template: e.g.,
1) %wheel ALL=(ALL) NOPASSWD: ALL 2) erica ALL=(ALL) ALL 3) tom ALL=(ALL) NOPASSWD: ALL
For Example 1: In the sudoers GP in the Computer Configuration section: Enter into the first field: %wheel Enter into the second field: (ALL) NOPASSWD: ALL
Similarly for Example 3: In the sudoers GP in the Computer Configuration section: Enter into the first field: tom Enter into the second field: (ALL) NOPASSWD: ALL
Once you have the correct syntax in place the above GP will show up in /etc/sudoers as follows: 1) %wheel rhel=(ALL) NOPASSWD: ALL 2) erica rhel=(ALL) ALL 3) tom rhel=(ALL) NOPASSWD: ALL
The first "ALL" will replaced with hostname dynamically which is not wrong.