Pavel Březina wrote:
On 08/23/2016 01:55 PM, Tony Brian Albers wrote:
Here you are:

[root ~]# ldapsearch -Y GSSAPI -b $dc
'(ou=*)' -s onelevel

# profile, $domain
dn: ou=profile,$dc
objectClass: top
objectClass: organizationalUnit
ou: profiles
ou: profile

# search result
search: 4
result: 0 Success

# numResponses: 2
# numEntries: 1

Sudo rules are not downloaded by SSSD because ou=sudoers is missing on
the IPA server, or it may have incorrect ACL. Does someone from IPA team
know why?

Perhaps the compat tree is disabled:

$ ipa-compat-manage status


Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to