LDAP su - user problem

[kevin leblanc <kevinzebeste@xxxxxxxxx>]

Hi the list !
I have a problem on PAM configuration on RHEL 4 and 5.
Let me explain you the problem :

I have a ldap database and I configure PAM to make users able to log into RHEL hosts.
That works fine !

After I configure SUDO to deport sudoers into LDAP, that works fine too..

Now, I want ldap users able to run "sudo su - localUser" and to enter *only* his Ldap password.

to make it more clear, let's take a example :

toto : local user with PWD1
testLdapUser : ldap user with PWD 2

I want a user able to do this :
1. ssh testLdapUser@host => enter PWD2 (OK)
2. sudo su - toto => enter only PWD2 (KO user have to enter PWD1 then PWD2)

Is it possible to do this ?
If yes, how ?

thanks

-- 
KeV
_______________________________________________
Pam-list mailing list
Pam-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/pam-list