On Wed, Jul 06, 2016 at 03:22:34PM +0200, Tomas Simecek wrote: > Hi Danila and other freeipa gurus, > sorry for my late answer, there is a bank holiday in CZ and I am off work > these two days. > Yes, /etc/nsswitch.conf is fine, see: > > [root@spcss-2t-www ~]# cat /etc/nsswitch.conf |grep sudo > sudoers: files sss > > I think it is set up as part of freeipa-client package. > I went through this guide: > https://fedorahosted.org/sssd/wiki/HOWTO_Troubleshoot_SUDO
We also need to see sssd_sudo.log and the log from the sudo itself (configured in /etc/sudo.conf) -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
