On Tue, Aug 11, 2015 at 09:29:46PM +0530, Yogesh Sharma wrote: > Yes Jakub...That was the issue. We have fixed it and update to List. > > Thanks Jakub. > > Would like to have one suggestion. > > We have implemented sudo, but every time we need to restart sssd to take > the changes. We have try implementing the cache timeout also, but not > working as expected. > > Any other config changes required?
No, this is not expected. Can you get logs after you've added the sudo rule but before the client is restarted in order to capture the issue? It would be best to add debug_level=7 to sudo, nss and domain sections. -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project