On Wed, Apr 08, 2015 at 10:00:50AM +0200, Chamambo Martin wrote: > I have these logs and cant seem to make sense of them
These are not the logs we asked for. What we need is debug_level=6 in the sudo section, then run sudo, then attach /var/log/sssd/sssd_sudo.log. It would also be nice if you could install ldb-tools and run: ldbsearch -H /var/lib/sss/db/cache_ai.co.zw.ldb To see if the sudo rules were cached at all by the sudo full refresh (see man sssd-sudo for description of the different refreshes sssd does). -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project