PAM User to sudoers

[dzidek23]

I understand that it is possible (and easy) to allow AD users to login to the server via ssh; PAM settings under "Users and Computers" -> LDAP Settings.

However this allows all users to have a system account.

Could anyone suggest how can I enable shell for one or some of the AD users?

Also I'm trying to figure out how to add an AD user to system sudoers?
I tried

Code: [Select]

sudo usermod -aG sudo username
adding

Code: [Select]

username      ALL=(ALL:ALL) ALL
and/or
domain\username       ALL=(ALL:ALL) ALLto the /etc/sudoers

Neither allows me to escalate privilages and I get "Domain\Username is not in the sudoers file.  This incident will be reported."

[dzidek23]

So I found a way to allow user to use sudo..

Edit the /etc/sudoers and add:

Code: [Select]

domain\\username   ALL=(ALL:ALL) ALLnote "\\" between domain and the username

user must also be in the sudo group

sudo usermod -aG sudo username

That still leaves me wit allowing only some users access to PAM.