## Allow www-data to run /usr/sbin/gosa-sync via sudo
dn: ou=sudoers,dc=skole,dc=skolelinux,dc=no
objectClass: top
objectClass: organizationalUnit
ou: sudoers

dn: cn=defaults,ou=sudoers,dc=skole,dc=skolelinux,dc=no
objectClass: top
objectClass: sudoRole
cn: defaults
description: Default sudo options go here
sudoOption: env_reset

dn: cn=DebianEdu,ou=sudoers,dc=skole,dc=skolelinux,dc=no
objectClass: top
objectClass: sudoRole
sudoUser: www-data
sudoHost: tjener.intern
cn: DebianEdu
sudoOption: !authenticate
sudoOption: !syslog
sudoOption: env_keep=USERPASSWORD
description: Propagate GOsa's changes to the system
sudoCommand: /usr/share/debian-edu-config/tools/gosa-sync
sudoCommand: /usr/share/debian-edu-config/tools/gosa-remove
sudoCommand: /usr/share/debian-edu-config/tools/gosa-create
sudoCommand: /usr/share/debian-edu-config/tools/gosa-remove-host
sudoCommand: /usr/share/debian-edu-config/tools/gosa-modify-host
sudoCommand: /usr/share/debian-edu-config/tools/gosa-create-host
sudoCommand: /usr/share/debian-edu-config/tools/gosa-sync-dns-nfs
sudoCommand: /usr/share/debian-edu-config/tools/gosa-lock-user
sudoCommand: /usr/share/debian-edu-config/tools/gosa-unlock-user

dn: cn=root,ou=sudoers,dc=skole,dc=skolelinux,dc=no
objectClass: top
objectClass: sudoRole
cn: root
sudoUser: root
sudoHost: ALL
sudoRunAs: ALL
sudoCommand: ALL

dn: cn=$FIRSTUSERNAME,ou=sudoers,dc=skole,dc=skolelinux,dc=no
objectClass: top
objectClass: sudoRole
cn: $FIRSTUSERNAME
sudoUser: $FIRSTUSERNAME
sudoHost: ALL
sudoRunAs: ALL
sudoCommand: ALL