> That '(root) ALL' rule doesn't come from /etc/sudoers as I thought because > nsswitch.conf presently only uses sss for sudoers. I still don't see where it > actually comes from though...
What groups is rundeck a member of? ----- Bingo! Thanks Pavel/Rob Turns out that I had long forgotten that I added rundeck user to sysadmin group for HBAC reasons, inherited the sudo rules for that group which were killing me. Rundeck now workee! -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
