--- old/sudo-1.8.11_p1.ebuild 2014-10-29 05:31:02.000000000 -0400 +++ old/sudo-1.8.11_p1.ebuild 2014-10-31 10:41:03.407110619 -0400 @@ -24,7 +24,7 @@ LICENSE="ISC BSD" SLOT="0" KEYWORDS="~alpha amd64 arm arm64 hppa ia64 m68k ~mips ppc ppc64 s390 sh sparc x86 ~amd64-fbsd ~sparc-fbsd ~x86-fbsd ~x64-freebsd ~sparc-solaris" -IUSE="ldap nls pam offensive selinux skey +sendmail" +IUSE="ldap nls pam offensive selinux skey +sendmail sssd" DEPEND="pam? ( virtual/pam ) skey? ( >=sys-auth/skey-1.1.5-r1 ) @@ -32,7 +32,8 @@ >=net-nds/openldap-2.1.30-r1 dev-libs/cyrus-sasl ) - sys-libs/zlib" + sys-libs/zlib + sssd? ( >=sys-auth/sssd-1.8[sudo] )" RDEPEND="${DEPEND} selinux? ( sec-policy/selinux-sudo ) ldap? ( dev-lang/perl ) @@ -116,6 +117,7 @@ $(use_with skey) \ $(use_with selinux) \ $(use_with sendmail) \ + $(use_with sssd) \ --without-opie \ --without-linux-audit \ --with-rundir="${EPREFIX}"/var/run/sudo \ @@ -156,6 +158,16 @@ } pkg_postinst() { + if use sssd ; then + ewarn + ewarn "To make use of sssd, add this line to your /etc/nsswitch.conf:" + ewarn " sudoers: sss files" + ewarn + ewarn "Also, within your sssd.conf file, append \"sudo\" to the \"services\" list," + ewarn "define a [sudo] block (even if nothing is in it), and define" + ewarn "ldap_sudo_search_base within your domain block, then restart sssd" + ewarn + fi if use ldap ; then ewarn ewarn "sudo uses the /etc/ldap.conf.sudo file for ldap configuration."