On 22.02.2016 15:55, Alexandre Ellert wrote:
I create another rule via web UI and it's fine now...don't remember
why the first one was duplicated.
Is it safe to delete these entries directly from LDAP ? :
ipaUniqueID=faac52c8-d96d-11e5-b61d-00505693334c,cn=sudorules,cn=sudo,dc=xxx,dc=xxx
and
ipaUniqueID=faa8de54-d96d-11e5-b75f-00505693334c,cn=sudorules,cn=sudo,dc=xxx,dc=xxx
Hello,
yes, it is safe to remove it by ldapdelete
Martin
2016-02-22 15:34 GMT+01:00 Alexandre Ellert <ellertalexan...@gmail.com>:
Hello,
I've just deployed a new IPA server 4.2 / Centos 7.2 and I create my
first sudo rule via web UI but it was duplicate (I don't know why...)
Now I have two rules with the same name and I can't delete them :
# ipa sudorule-find --all
--------------------
2 Sudo Rules matched
--------------------
dn:
ipaUniqueID=faa8de54-d96d-11e5-b75f-00505693334c,cn=sudorules,cn=sudo,dc=numeezy,dc=intra
Rule name: allow sysadmins everywher
Enabled: TRUE
ipauniqueid: faa8de54-d96d-11e5-b75f-00505693334c
objectclass: ipasudorule, ipaassociation
dn:
ipaUniqueID=faac52c8-d96d-11e5-b61d-00505693334c,cn=sudorules,cn=sudo,dc=numeezy,dc=intra
Rule name: allow sysadmins everywher
Enabled: TRUE
ipauniqueid: faac52c8-d96d-11e5-b61d-00505693334c
objectclass: ipasudorule, ipaassociation
----------------------------
Number of entries returned 2
----------------------------
# ipa sudorule-del "allow sysadmins everywher"
ipa: ERROR: The search criteria was not specific enough. Expected 1 and found 2.
Thanks for your help.
Alexandre
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project
