Jeff Goddard wrote:
I've looked though these but not found anything helpful. It appears as
though my previous statement about the 1 group being found was
misleading as the sssd.$mydomain.com.log file reports that no sudo rules
are found. Does this mean that the LDAP tree being searched is different
on ubuntu vs centos?
I find that extremely unlikely.
You may want to outline more what you've already checked.
For example, is sss in sudoers in /etc/nsswitch.conf?
You can check the 389-ds access log to see what, if any queries are
being made. I'd clean the sssd cache in advance.
rob
Jeff
On Wed, Aug 10, 2016 at 2:13 PM, Rob Crittenden <[email protected]
<mailto:[email protected]>> wrote:
Jeff Goddard wrote:
Sean,
Thanks for the reply. I don't think that's my problem but I'm
posting a
redacted copy of the sssd.conf file for review below.
I'd start here:
https://fedorahosted.org/sssd/wiki/HOWTO_Troubleshoot_SUDO
<https://fedorahosted.org/sssd/wiki/HOWTO_Troubleshoot_SUDO>
rob
--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project