I have a krb5-ldap user in an "administrators" which is added to sudoers list as follows:
%administrators ALL=(ALL) ALL
Now that works fine for all sudo operations.
But when that user wants to install something in the Ubuntu Software Center, he gets prompted for the password of a local "admin" user.
I have no idea why it would behave that way. How can I fix this?
Update
Also tried to add these users to the sudo groups with pam-groups in /etc/security/group.conf:
*;*;%administrators;Al0000-2400;sudo
The sudo group now shows up correctly in groups, however the software center still asks for the password for another, local user.
The solution is to add adminstrators to the policy kit in /etc/polkit-1/localauthority.conf.d/51-ubuntu-admin.conf:
[Configuration]
AdminIdentities=unix-group:sudo;unix-group:admin;unix-group:administrators
No comments:
Post a Comment