[SSSD-users] Re: Passwordless SUDO commands in AD

2017-12-08 Thread Pavel Březina
On 12/04/2017 09:15 PM, Max DiOrio wrote: Hi, We use Active Directory to manage our Linux access including SUDO permissions. We need to have a particular account run a passwordless command. I created a new sudoRule in AD, added the following: sudoCommand /bin/systemctl restart

[SSSD-users] Re: Multiple skel dir (one oer domain)

2017-12-08 Thread Lukas Slebodnik
On (08/12/17 06:02), Иван Мастренко wrote: >Hello! >I'm trying to implement system, where could be logged 3 types of ldap users >separated per groups. >First type is full admin, another 2 is a very imited users, with rbash and >unical per group home dir, which defines which commands a allowed to

[SSSD-users] Re: fast cache corruption

2017-12-08 Thread Lukas Slebodnik
On (08/12/17 12:07), Sumit Bose wrote: >On Fri, Dec 08, 2017 at 11:57:23AM +0100, Franky Van Liedekerke wrote: >> Op Vrijdag, 08-12-2017 om 11:34 schreef Sumit Bose: >> > On Fri, Dec 08, 2017 at 11:10:49AM +0100, Franky Van Liedekerke wrote: >> > > Before opening a bug report, I wanted to discuss

[SSSD-users] Re: fast cache corruption

2017-12-08 Thread Sumit Bose
On Fri, Dec 08, 2017 at 11:10:49AM +0100, Franky Van Liedekerke wrote: > Before opening a bug report, I wanted to discuss a new issue here. > > I have ldap users that are in 1500 groups (yeah, I know ... not my choice > either), ldap is using rfc2307 scheme (openldap, redhat EL7). > Now, when

[SSSD-users] Re: fast cache corruption

2017-12-08 Thread Sumit Bose
On Fri, Dec 08, 2017 at 11:57:23AM +0100, Franky Van Liedekerke wrote: > Op Vrijdag, 08-12-2017 om 11:34 schreef Sumit Bose: > > On Fri, Dec 08, 2017 at 11:10:49AM +0100, Franky Van Liedekerke wrote: > > > Before opening a bug report, I wanted to discuss a new issue here. > > > > > > I have ldap

[SSSD-users] Re: fast cache corruption

2017-12-08 Thread Franky Van Liedekerke
Op Vrijdag, 08-12-2017 om 11:34 schreef Sumit Bose: > On Fri, Dec 08, 2017 at 11:10:49AM +0100, Franky Van Liedekerke wrote: > > Before opening a bug report, I wanted to discuss a new issue here. > > > > I have ldap users that are in 1500 groups (yeah, I know ... not my choice > > either), ldap