Re: [Freeipa-users] sudo rules do not seem to work

2015-10-08 Thread Karl Forner
Sorry I had disabled the emailing, just was your answers in the archives. >> How can I debug this ? >Pavel (CC) has a nice sudo debug howto, maybe it would be helpful? Where is it ? Do you mean the slide "FreeIPA Training Series: Obtaining debugging information" from

Re: [Freeipa-users] sudo rules do not seem to work

2015-10-08 Thread Pavel Březina
On 10/08/2015 04:09 PM, Karl Forner wrote: Sorry I had disabled the emailing, just was your answers in the archives. How can I debug this ? Pavel (CC) has a nice sudo debug howto, maybe it would be helpful? Where is it ? Do you mean the slide "FreeIPA Training Series: Obtaining debugging

Re: [Freeipa-users] sudo rules do not seem to work

2015-10-07 Thread Jakub Hrozek
On Tue, Oct 06, 2015 at 06:28:14PM +0200, Karl Forner wrote: > Hello, > > I had assumed sudo rules worked because I have an "allow_all for admins" > sudo rule that seemed to work, but I wonder if there is an implicit rule > for the special group admins ? > > > Because I have tried to replicate

Re: [Freeipa-users] sudo rules do not seem to work

2015-10-07 Thread Jakub Hrozek
On Wed, Oct 07, 2015 at 11:19:02AM +0200, Pavel Březina wrote: > On 10/07/2015 10:03 AM, Jakub Hrozek wrote: > >On Tue, Oct 06, 2015 at 06:28:14PM +0200, Karl Forner wrote: > >>Hello, > >> > >>I had assumed sudo rules worked because I have an "allow_all for admins" > >>sudo rule that seemed to

Re: [Freeipa-users] sudo rules do not seem to work

2015-10-07 Thread Pavel Březina
On 10/07/2015 10:03 AM, Jakub Hrozek wrote: On Tue, Oct 06, 2015 at 06:28:14PM +0200, Karl Forner wrote: Hello, I had assumed sudo rules worked because I have an "allow_all for admins" sudo rule that seemed to work, but I wonder if there is an implicit rule for the special group admins ?

[Freeipa-users] sudo rules do not seem to work

2015-10-06 Thread Karl Forner
Hello, I had assumed sudo rules worked because I have an "allow_all for admins" sudo rule that seemed to work, but I wonder if there is an implicit rule for the special group admins ? Because I have tried to replicate this allow_all rule for for other user groups, and it does not seem to work