Re: [Freeipa-users] sudo runs despite being denied by HBAC rules

2016-02-13 Thread Martin Kosek
On 02/09/2016 05:06 PM, Ian Collier wrote: Can anyone help me to understand these logs... is there maybe a bug here? The basic situation is that there is no HBAC rule that would allow sudo. When people try it, sss accepts their password but then denies them access to the sudo command. But

Re: [Freeipa-users] sudo runs despite being denied by HBAC rules

2016-02-13 Thread Ian Collier
I wrote... > Can anyone help me to understand these logs... is there maybe a bug here? > The basic situation is that there is no HBAC rule that would allow > sudo. When people try it, sss accepts their password but then denies > them access to the sudo command. But despite this, our logs still

[Freeipa-users] sudo runs despite being denied by HBAC rules

2016-02-09 Thread Ian Collier
Can anyone help me to understand these logs... is there maybe a bug here? The basic situation is that there is no HBAC rule that would allow sudo. When people try it, sss accepts their password but then denies them access to the sudo command. But despite this, our logs still contain some