Bug 1382430 - [RFE] Can --with-kerb5 be added to the configure for sudo?
Summary: [RFE] Can --with-kerb5 be added to the configure for sudo?
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Fedora
Classification: Fedora
Component: sudo
Version: rawhide
Hardware: All
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Radovan Sroka
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-10-06 16:58 UTC by Pat Riehecky
Modified: 2019-08-16 12:26 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-08-16 12:26:52 UTC
Type: Bug

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Pat Riehecky 2016-10-06 16:58:21 UTC 
Description of problem:

Having a sudo with the ability to accept kerberos tickets would greatly simplify our ability to add enhanced rights for users while still preventing them from typing a valuable password over possible network connections.
Version-Release number of selected component (if applicable):


How reproducible:100%


Steps to Reproduce:
1.Attempt to use kerberos ticket rather than password auth
2.
3.

Actual results:
kerberos ticket auth not supported

Expected results:
kerberos ticket auth supported

Additional info:
Configure option -with-kerb5
Comment 1 Pat Riehecky 2016-10-06 16:59:21 UTC 
Somehow I failed to paste version number.... sudo-1.8.18-1.fc23
Comment 3 Radovan Sroka 2019-08-16 12:26:52 UTC 
Historically, fedora/redhat authentication was based on pam. Sudo is compiled with --with-pam which is mutually excluded with --with-krb5 therefore it is not possible to use them both. But there is possibility to use pam_krb5.so pam module which is another way how to use kerberos tickets and sudo together.
Note You need to log in before you can comment on or make changes to this bug.