Add sudo

diff --git a/input/index.mdwn b/input/index.mdwn
index bea8094..9d2acec 100644 (file)
--- a/input/index.mdwn
+++ b/input/index.mdwn
@@ -17,6 +17,11 @@ For a list of servers check
 VCS repositories for ud-ldap and all our other stuff can be found at
 <https://db.debian.org/bzr/> and <https://db.debian.org/git/>.
 
+## documentation
+
+* [RT Usage](http://wiki.debian.org/Teams/DSA/RTUsage) - offsite
+* [[user/sudo]]: How to set sudo passwords.
+
 ## Internal documentation
 
 * [[howto/dns]]

diff --git a/input/user/sudo.creole b/input/user/sudo.creole
new file mode 100644 (file)
index 0000000..6d7b7ec
--- /dev/null
+++ b/input/user/sudo.creole
@@ -0,0 +1,14 @@
+== sudo passwords ==
+
+Some groups can use sudo on different debian.org systems to access
+the group's role account user or to do other stuff.
+
+Most of these require the use of a sudo-password that is different
+from the standard ldap/unix password.
+
+To set it, log into https://db.debian.org/ with your ldap credentials, set the
+new sudo-password (which needs to be different from the ldap password), optionally
+limiting it to only one host and confirm the change in signed mail to db.d.o as
+instructed.
+
+To find out to which, if any, commands you have access to run {{{sudo -l}}}.