** Description changed: As discussed on this page: https://pagure.io/freeipa/issue/6139 Sudo + SSSD doesn't work with hostgroups. As suggested, sudo upstream has a fix for this problem in https://www.sudo.ws/repos/sudo/rev/2eab4070dcf7 It looks similar to the issue https://bugs.launchpad.net/bugs/1688034 but is actually different. - 1) root@ipa:~# lsb_release -rd + 1) root@ipa:~# lsb_release -rd Description: Ubuntu 16.04.2 LTS Release: 16.04 2) root@ipa:~# apt-cache policy sudo sudo: - Installed: 1.8.16-0ubuntu1.3 - Candidate: 1.8.16-0ubuntu1.3 - Version table: - *** 1.8.16-0ubuntu1.3 500 - 500 http://localapt/ubuntu xenial-updates/main amd64 Packages - 100 /var/lib/dpkg/status - 1.8.16-0ubuntu1 500 - 500 http://localapt/ubuntu xenial/main amd64 Packages + Installed: 1.8.16-0ubuntu1.3 + Candidate: 1.8.16-0ubuntu1.3 + Version table: + *** 1.8.16-0ubuntu1.3 500 + 500 http://localapt/ubuntu xenial-updates/main amd64 Packages + 100 /var/lib/dpkg/status + 1.8.16-0ubuntu1 500 + 500 http://localapt/ubuntu xenial/main amd64 Packages 3) I expect to be able to grant sudo rights based on IPA hostgroups - 4) "testuser is not allowed to run sudo on cw-st-ipa.catawiki.net. This + 4) "testuser is not allowed to run sudo on host.ipa.example.com. This incident will be reported."
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1689796 Title: sudo + sssd does not work for IPA hostgroups To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/1689796/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs