On Wed, Sep 13, 2017 at 11:05:25PM +0300, Alexander Bokovoy via FreeIPA-users 
wrote:
> On ke, 13 syys 2017, Mark Haney via FreeIPA-users wrote:
> > On 09/13/2017 03:44 PM, Răzvan Corneliu C.R. VILT via FreeIPA-users wrote:
> > > Hi Mark,
> > > 
> > > Not all CentOS releases are created equal. Support for Sudo appeared
> > > later in IPA and you’ll probably need to update sssd and ipa-client.
> > > The one in 6.8 should work fine. I’ve recently enrolled a few rhel 6.4
> > > servers and noticed the same thing but everything was solved after
> > > doing a yum update sssd.
> > > 
> > > Cheers,
> > > Răzvan
> > > 
> > Unfortunately, sssd is already the 6.9 version:
> > 
> > python-sssdconfig-1.13.3-57.el6_9.noarch
> > sssd-common-1.13.3-57.el6_9.x86_64
> > sssd-common-pac-1.13.3-57.el6_9.x86_64
> > sssd-ad-1.13.3-57.el6_9.x86_64
> > sssd-ldap-1.13.3-57.el6_9.x86_64
> > sssd-1.13.3-57.el6_9.x86_64
> > sssd-client-1.13.3-57.el6_9.x86_64
> > sssd-krb5-common-1.13.3-57.el6_9.x86_64
> > sssd-ipa-1.13.3-57.el6_9.x86_64
> > sssd-krb5-1.13.3-57.el6_9.x86_64
> > sssd-proxy-1.13.3-57.el6_9.x86_64
> Check sudo version as well.

And if that doesn't help, follow
https://docs.pagure.org/SSSD.sssd/users/sudo_troubleshooting.html

Do you use default_domain_suffix with IPA-AD trusts? That's one thing
that's known to not work on el6..
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org

Reply via email to