Hi Everyone,

When I try to run "sudo su - [user]" on an Ubuntu 20 or Ubuntu 22
client, I get the error "su: Permisison denied". Upon enabling
debug_level = 6 for the domain, I saw in the log the message "Access
denied by HBAC rules".

Well, that's odd since my user is in a group that is allowed to login
to any client using any service. In fact, when I try to run the same
command from a CentOS or AlmaLinux client, the su succeeds.

After adding the "su" and "su-l" HBAC Services to the group of the user
I'm trying to su to, the command worked on the Ubuntu clients.

I'm confused as to why the clients are behaving differently. I also
don't know which client is responding correctly before adding the "su"
and "su-l" HBAC Services to the user group the user is a member of.

Has anyone else run into this? Am I doing something incorrectly?

-- 
Ranbir
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to