Re: [Freeipa-users] Stuck getting sudo working with Ubuntu client

2015-05-08 Thread Andrew Sacamano
Thanks Timo, And sorry I missed that. How's this? https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1453253 Thanks again, Andrew On Tue, May 5, 2015 at 2:43 PM, Timo Aaltonen tjaal...@ubuntu.com wrote: On 05.05.2015 23:27, Andrew Sacamano wrote: Thanks again Lukas and Timo, I'm very

Re: [Freeipa-users] Stuck getting sudo working with Ubuntu client

2015-05-05 Thread Jakub Hrozek
On Tue, May 05, 2015 at 11:43:34PM +0300, Timo Aaltonen wrote: On 05.05.2015 23:27, Andrew Sacamano wrote: Thanks again Lukas and Timo, I'm very sorry it took so long for me to get to this - I got pulled into an urgent project at work and am just getting my head above water today.

Re: [Freeipa-users] Stuck getting sudo working with Ubuntu client

2015-05-05 Thread Andrew Sacamano
Thanks again Lukas and Timo, I'm very sorry it took so long for me to get to this - I got pulled into an urgent project at work and am just getting my head above water today. I've filed https://fedorahosted.org/sssd/ticket/2648 Many thanks again, and please let me know if there is anything I

Re: [Freeipa-users] Stuck getting sudo working with Ubuntu client

2015-04-22 Thread Timo Aaltonen
On 21.04.2015 22:45, Lukas Slebodnik wrote: On (20/04/15 17:54), Andrew Sacamano wrote: Thanks again, Lukas! I was wondering if the overlaps of names was a problem, so I redid parts of my IPA setup to rename them - thanks for pointing out the ticket! Also, your suggestion to use

Re: [Freeipa-users] Stuck getting sudo working with Ubuntu client

2015-04-21 Thread Lukas Slebodnik
On (20/04/15 17:54), Andrew Sacamano wrote: Thanks again, Lukas! I was wondering if the overlaps of names was a problem, so I redid parts of my IPA setup to rename them - thanks for pointing out the ticket! Also, your suggestion to use ldap_group_object_class = ipaUserGroup worked - which saves

Re: [Freeipa-users] Stuck getting sudo working with Ubuntu client

2015-04-20 Thread Andrew Sacamano
Thanks again, Lukas! I was wondering if the overlaps of names was a problem, so I redid parts of my IPA setup to rename them - thanks for pointing out the ticket! Also, your suggestion to use ldap_group_object_class = ipaUserGroup worked - which saves me the trouble of tracking that down in six

Re: [Freeipa-users] Stuck getting sudo working with Ubuntu client

2015-04-20 Thread Lukas Slebodnik
On (19/04/15 12:51), Andrew Sacamano wrote: Thanks again Lukas, These turned out to be very helpful debugging suggestions, and were the critical part of getting the problem solved - the pointer to ldb-tools was extremely helpful in identifying where the issue was happening! With them, I was able

Re: [Freeipa-users] Stuck getting sudo working with Ubuntu client

2015-04-19 Thread Dmitri Pal
On 04/19/2015 02:51 PM, Andrew Sacamano wrote: Thanks again Lukas, These turned out to be very helpful debugging suggestions, and were the critical part of getting the problem solved - the pointer to ldb-tools was extremely helpful in identifying where the issue was happening! With them, I

Re: [Freeipa-users] Stuck getting sudo working with Ubuntu client

2015-04-19 Thread Andrew Sacamano
Thanks again Lukas, These turned out to be very helpful debugging suggestions, and were the critical part of getting the problem solved - the pointer to ldb-tools was extremely helpful in identifying where the issue was happening! With them, I was able to see the right sudo rules were being

Re: [Freeipa-users] Stuck getting sudo working with Ubuntu client

2015-04-17 Thread Lukas Slebodnik
On (17/04/15 11:32), Andrew Sacamano wrote: Hi everyone, I've spent a couple of days digging around the web, watching logs, and poking things, and I'm stuck getting sudo working with IPA on a new box I've just set up. I have had it working in the past on a test box, but something about this box

Re: [Freeipa-users] Stuck getting sudo working with Ubuntu client

2015-04-17 Thread Andrew Sacamano
Thanks Lukas, I'm very glad to have concrete debugging suggestions. I'll investigate as you suggest and report back. Thanks again, Andrew On Fri, Apr 17, 2015 at 2:28 PM, Lukas Slebodnik lsleb...@redhat.com wrote: On (17/04/15 11:32), Andrew Sacamano wrote: Hi everyone, I've spent a