# SLES12: using sudo-rules from LDAP

**URL:** <https://forums.suse.com/t/sles12-using-sudo-rules-from-ldap/26331>\
**Category:** SLES Configure-Administer\
**Created:** [November 9, 2014, 5:05pm UTC](https://forums.suse.com/t/sles12-using-sudo-rules-from-ldap/26331 "2014-11-09T17:05:28Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![dpueltz](https://avatars.discourse-cdn.com/v4/letter/d/65b543/32.png) [@dpueltz](https://forums.suse.com/u/dpueltz)\
**Post date:** [November 9, 2014, 5:05pm UTC](https://forums.suse.com/t/sles12-using-sudo-rules-from-ldap/26331/1 "2014-11-09T17:05:28Z")

</div>

Hello,  
new topic for me: sssd  
With some reading in the man-Pages and on [docs.fedoraproject.org](http://docs.fedoraproject.org) (!) I’ve managed to use our LDAP-Infrastructure for user-Logins, as we did with nss\_ldap and pam\_ldap in the past.  
But I can’t manage to use the sudo-rules from LDAP. Each time when I call the sudo-command, it’s complaining about a missing /usr/lib64/libsss\_sudo.so.

Which RPM-Package contains this Lib?

regards, Detlef

---

<div class="post-metadata">

**Author:** ![malcolmlewis](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/malcolmlewis/32/11375_2.png) [@malcolmlewis](https://forums.suse.com/u/malcolmlewis)\
**Post date:** [November 9, 2014, 8:01pm UTC](https://forums.suse.com/t/sles12-using-sudo-rules-from-ldap/26331/2 "2014-11-09T20:01:17Z")

</div>

> [@](#):
>
> On Sun 09 Nov 2014 03:14:01 PM CST, dpueltz wrote:
> 
> Hello,  
> new topic for me: sssd  
> With some reading in the man-Pages and on [docs.fedoraproject.org](http://docs.fedoraproject.org) (!)  
> I’ve managed to use our LDAP-Infrastructure for user-Logins, as we did  
> with nss\_ldap and pam\_ldap in the past.  
> But I can’t manage to use the sudo-rules from LDAP. Each time when I  
> call the sudo-command, it’s complaining about a missing  
> /usr/lib64/libsss\_sudo.so.
> 
> Which RPM-Package contains this Lib?
> 
> regards, Detlef

Hi  
It should be in the sssd package (well it was for SLES 11 SP3), but  
looks like it’s been missed in the SLES 12 rpm. Can you raise an SR and  
post back the SR number and can follow up with my SUSE contacts.

–  
Cheers Malcolm Â°Â¿Â° LFCS, SUSE Knowledge Partner (Linux Counter #276890)  
SUSE Linux Enterprise Desktop 12 GNOME 3.10.1 Kernel 3.12.28-4-default  
If you find this post helpful and are logged into the web interface,  
please show your appreciation and click on the star below… Thanks!

---

<div class="post-metadata">

**Author:** ![dpueltz](https://avatars.discourse-cdn.com/v4/letter/d/65b543/32.png) [@dpueltz](https://forums.suse.com/u/dpueltz)\
**Post date:** [November 9, 2014, 9:47pm UTC](https://forums.suse.com/t/sles12-using-sudo-rules-from-ldap/26331/3 "2014-11-09T21:47:44Z")

</div>

SR 10924006281

Thanks!  
Here at home, with opensuse-13.1, it would be the package “libsss\_sudo”

---

<div class="post-metadata">

**Author:** ![malcolmlewis](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/malcolmlewis/32/11375_2.png) [@malcolmlewis](https://forums.suse.com/u/malcolmlewis)\
**Post date:** [November 9, 2014, 10:24pm UTC](https://forums.suse.com/t/sles12-using-sudo-rules-from-ldap/26331/4 "2014-11-09T22:24:52Z")

</div>

> [@](#):
>
> On Sun 09 Nov 2014 07:54:01 PM CST, dpueltz wrote:
> 
> SR 10924006281
> 
> Thanks!  
> Here at home, with opensuse-13.1, it would be the package  
> “libsss\_sudo”

Hi  
Yes, it has the shared library (so) and the header file.

–  
Cheers Malcolm Â°Â¿Â° LFCS, SUSE Knowledge Partner (Linux Counter #276890)  
SUSE Linux Enterprise Desktop 12 GNOME 3.10.1 Kernel 3.12.28-4-default  
If you find this post helpful and are logged into the web interface,  
please show your appreciation and click on the star below… Thanks!

---

<div class="post-metadata">

**Author:** ![dpueltz](https://avatars.discourse-cdn.com/v4/letter/d/65b543/32.png) [@dpueltz](https://forums.suse.com/u/dpueltz)\
**Post date:** [February 12, 2015, 3:09pm UTC](https://forums.suse.com/t/sles12-using-sudo-rules-from-ldap/26331/5 "2015-02-12T15:09:15Z")

</div>

SR 10924006281: 3 months ago I opened this SR, nothing heard since then!

What can be so difficult to release a patch for package “sssd”? The sssd-package of SLES11-SP3 contains the missing lib (and works!)

BTW: Am I the only one who’s missing this lib? Or ist anyone else using the “old fashioned” (but functional !!!) pam\_ldap/nss\_ldap ?

---

<div class="post-metadata">

**Author:** ![Jens-U](https://avatars.discourse-cdn.com/v4/letter/j/d78d45/32.png) [@Jens-U](https://forums.suse.com/u/Jens-U)\
**Post date:** [February 12, 2015, 3:24pm UTC](https://forums.suse.com/t/sles12-using-sudo-rules-from-ldap/26331/6 "2015-02-12T15:24:16Z")

</div>

Hi dpueltz,

[QUOTE=dpueltz;26340]SR 10924006281: 3 months ago I opened this SR, nothing heard since then!

What can be so difficult to release a patch for package “sssd”? The sssd-package of SLES11-SP3 contains the missing lib (and works!)

BTW: Am I the only one who’s missing this lib? Or ist anyone else using the “old fashioned” (but functional !!!) pam\_ldap/nss\_ldap ?[/QUOTE]

you may want to take this to [https://forums.suse.com/forumdisplay.php?55-Talk-to-a-SUSE-Technical-Services-Manager](https://forums.suse.com/forumdisplay.php?55-Talk-to-a-SUSE-Technical-Services-Manager), which is the proper place for such comments.

BTW, from your list of two, I’m using option 3: Still working on SLES11SP3 😉

Regards,  
Jens

---

<div class="post-metadata">

**Author:** ![malcolmlewis](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/malcolmlewis/32/11375_2.png) [@malcolmlewis](https://forums.suse.com/u/malcolmlewis)\
**Post date:** [February 12, 2015, 3:24pm UTC](https://forums.suse.com/t/sles12-using-sudo-rules-from-ldap/26331/7 "2015-02-12T15:24:46Z")

</div>

> [@](#):
>
> On Thu 12 Feb 2015 01:14:01 PM CST, dpueltz wrote:
> 
> SR 10924006281: 3 months ago I opened this SR, nothing heard since then!
> 
> What can be so difficult to release a patch for package “sssd”? The  
> sssd-package of SLES11-SP3 contains the missing lib (and works!)
> 
> BTW: Am I the only one who’s missing this lib? Or ist anyone else using  
> the “old fashioned” (but functional !!!) pam\_ldap/nss\_ldap ?

Hi  
I’ve pinged my SUSE Contacts to see what is happening.

–  
Cheers Malcolm Â°Â¿Â° LFCS, SUSE Knowledge Partner (Linux Counter #276890)  
SUSE Linux Enterprise Desktop 12 GNOME 3.10.1 Kernel 3.12.36-38-default  
If you find this post helpful and are logged into the web interface,  
please show your appreciation and click on the star below… Thanks!

---

<div class="post-metadata">

**Author:** ![fpernet](https://avatars.discourse-cdn.com/v4/letter/f/46a35a/32.png) [@fpernet](https://forums.suse.com/u/fpernet)\
**Post date:** [February 23, 2015, 4:37pm UTC](https://forums.suse.com/t/sles12-using-sudo-rules-from-ldap/26331/8 "2015-02-23T16:37:18Z")

</div>

Hi All,

Same problem for one of my customer. nss mappings including sudo in ldap is a very popular way to centralize informations. We really need a solution for this.  
It is already hard enough to switch from openldap to sssd (especially to find correct documentation), we really don’t need a missing library …

Reminder:  
SLES12 : version 1.11.5.1 without any libsss\_sudo.so  
SLES11 : version 1.9.5 complete  
OpenSuse : version 1.12.2 complete  
Seems to critical to upgrade the whole sssd stack on a production server …

I can also open an SR but i am not sure it will speed up a solution. 3 months wihtout an explanation is not very serious and i start to have problem wht my Suse customers.

Cheers

---

<div class="post-metadata">

**Author:** ![Jens-U](https://avatars.discourse-cdn.com/v4/letter/j/d78d45/32.png) [@Jens-U](https://forums.suse.com/u/Jens-U)\
**Post date:** [February 24, 2015, 3:03pm UTC](https://forums.suse.com/t/sles12-using-sudo-rules-from-ldap/26331/9 "2015-02-24T15:03:01Z")

</div>

Hi fpernet,

> 3 months wihtout an explanation

I can’t help with that, but from what I’ve heard there’s no need to open a SR. OTOH, maybe you’d receive an explanation that way? 😉

Regards,  
Jens

---

<div class="post-metadata">

**Author:** ![Lawrence1](https://avatars.discourse-cdn.com/v4/letter/l/e56c9b/32.png) [@Lawrence1](https://forums.suse.com/u/Lawrence1)\
**Post date:** [July 5, 2015, 6:32pm UTC](https://forums.suse.com/t/sles12-using-sudo-rules-from-ldap/26331/10 "2015-07-05T18:32:45Z")

</div>

[QUOTE=dpueltz;26340]SR 10924006281: 3 months ago I opened this SR, nothing heard since then!

What can be so difficult to release a patch for package “sssd”? The sssd-package of SLES11-SP3 contains the missing lib (and works!)

BTW: Am I the only one who’s missing this lib? Or ist anyone else using the “old fashioned” (but functional !!!) pam\_ldap/nss\_ldap ?[/QUOTE]

For what it is worth, it does look like SUSE has addressed this with SLES 12 🙂 …

[https://www.suse.com/support/update/announcement/2015/suse-ru-20150864-1.html](https://www.suse.com/support/update/announcement/2015/suse-ru-20150864-1.html)

Cheers,

– lorenso
