# and ftpmaster can access the role user for their web services
%debadmin FTPHOSTS=(dak-web) ALL
-# the httpredir role use can run a couple of things as httpredir-app
-httpredir ALL=(httpredir-app) NOPASSWD: /usr/bin/starman
+# the httpredir role use can run things as httpredir-app
+httpredir ALL=(httpredir-app) NOPASSWD: ALL
# some groups are in apachectrl on "their" hosts so they can reload apache and update their vhost
%apachectrl ALL=(root) /usr/sbin/apache2-vhost-update