On Пят, 05 сту 2024, Dmitry Krasov via FreeIPA-users wrote:
Hello.
The FreeIpa user has sudo rights on a Ubuntu 2204 desktop machine that
is in the FreeIpa Linux domain. It can do sudo su, sudo apt install…
But when starting some services and basic installation of applications
from the market (in general, when it comes to gui admin rights), it
asks the local administrator password.
How can I fix this so the user’s password was requested from FreeIpa or
not at all? --
Please provide more details. A demonstration of what exactly is being
done would definitely help, as well as journald logs (and sssd debug
logs).
It is unclear what do you mean by 'installation of applicaiton from the
market', for example. What is that? If this means using snap or flatpak,
how those get integrated to the system?
I suspect what you see is that some of PAM services on your Ubuntu
system have no pam_sss reference and thus don't even invoke SSSD to
perform authorization/authentication.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
--
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
