Bug 1382430

Summary:	[RFE] Can --with-kerb5 be added to the configure for sudo?
Product:	[Fedora] Fedora	Reporter:	Pat Riehecky <riehecky>
Component:	sudo	Assignee:	Radovan Sroka <rsroka>
Status:	CLOSED WONTFIX	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	rawhide	CC:	csieh, kzak, misterbonnie, rsroka
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2019-08-16 12:26:52 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Pat Riehecky 2016-10-06 16:58:21 UTC

Description of problem:

Having a sudo with the ability to accept kerberos tickets would greatly simplify our ability to add enhanced rights for users while still preventing them from typing a valuable password over possible network connections.
Version-Release number of selected component (if applicable):


How reproducible:100%


Steps to Reproduce:
1.Attempt to use kerberos ticket rather than password auth
2.
3.

Actual results:
kerberos ticket auth not supported

Expected results:
kerberos ticket auth supported

Additional info:
Configure option -with-kerb5

Comment 1 Pat Riehecky 2016-10-06 16:59:21 UTC

Somehow I failed to paste version number.... sudo-1.8.18-1.fc23

Comment 3 Radovan Sroka 2019-08-16 12:26:52 UTC

Historically, fedora/redhat authentication was based on pam. Sudo is compiled with --with-pam which is mutually excluded with --with-krb5 therefore it is not possible to use them both. But there is possibility to use pam_krb5.so pam module which is another way how to use kerberos tickets and sudo together.