Ronald Wimmer via FreeIPA-users wrote:
> We managed to integrate AIX IPA clients successfully some time ago. sudo
> was also working fine. A few weeks ago sudo stopped working.

It begs the question: what happened a few weeks ago? Did you upgrade
anything?

What version of IPA server?

> The /etc/ldap.conf on our AIX clients contains the following line:
> sudoers_base cn=users,cn=compat,ou=sudoers,dc=linux,dc=mydomain,dc=at

I believe it should be ou=sudoers,dc=linux,dc=mydomain,dc=at

> If we try to look that up with an LDAP browser we do not even find a OU
> named "sudoers". Did the LDAP structure change in the recent past? What
> should the sudoers_base line contain?

Changes were made in slapi-nis which provides the compat tree but like I
said, I don't know that cn=users,cn=compat,ou=sudoers would have ever
worked.

rob
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to