kerb_sudo.rb

                                     X# these attributes are set in this recipe because
# they should *only* be set if this recipe is run
node.default['krb5']['krb5_conf']['appdefaults']['pam']['mappings'] = '^(.*)$ $1/sudo'

# authconfig should not be run b/c kerb is enabled manually only for
# sudo using the pam recipe
node.default['krb5']['client']['authconfig'] = 'echo "no need to run authconfig"'

include_recipe 'krb5'
include_recipe 'pam'