Configure options: --prefix=/usr -v --with-all-insults --with-pam --with-fqdn --with-logging=syslog --with-logfac=authpriv --with-env-editor --with-editor=/usr/bin/editor --with-exampledir=/usr/share/doc/sudo/examples --with-timeout=15 --with-password-timeout=0 --with-passprompt=[sudo] password for %p: --without-lecture --with-tty-tickets --disable-root-mailer --enable-admin-flag --with-sendmail=/usr/sbin/sendmail --with-rundir=/var/run/sudo --mandir=/usr/share/man --libexecdir=/usr/lib/sudo --with-sssd --with-sssd-lib=/usr/lib/x86_64-linux-gnu --with-selinux --with-linux-audit
------
Mean while I will compare the sudo logs and will inform you.
Thanks and Regards,
Alka Murali
On (07/08/17 17:10), Alka Murali via FreeIPA-users wrote:
>Hello Team,
>
>Have checked all the logs, and the SSSD Logs are saying that it is
>processing the sudo rules which I have configured on my FreeIPA Server.
>However if I run sudo commands on my client, it is giving me the message
>that the user is not in sudoers file.
>
>Is it an issue with my SUDO package on Ubuntu or an issue with SSSD.I have
>been using the same Configuration in my other clients and all of them are
>able to fetch the SUDO Rules.
>
If you use the same configuration on older versions of ubuntu
then it sounds like a bug in sudo package in ubuntu.
I would recommend to compare sudo logs from different version
https://docs.pagure.org/SSSD.sssd/users/sudo_ troubleshooting.html# obtaining-logs
BTW it would be good to check that sudo is built with sssd support
sudo --version | grep sss
Here is an output from fedora
sh# sudo --version | grep sss
Configure options: --build=x86_64-redhat-linux-gnu
--host=x86_64-redhat-linux-gnu --program-prefix= --disable-dependency-tracking
--prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin
--sysconfdir=/etc --datadir=/usr/share --includedir=/usr/include
--libdir=/usr/lib64 --libexecdir=/usr/libexec --localstatedir=/var
--sharedstatedir=/var/lib --mandir=/usr/share/man --infodir=/usr/share/info
--prefix=/usr --sbindir=/usr/sbin --libdir=/usr/lib64
--docdir=/usr/share/doc/sudo --disable-root-mailer --with-logging=syslog
--with-logfac=authpriv --with-pam --with-pam-login --with-editor=/bin/vi
--with-env-editor --with-ignore-dot --with-tty-tickets --with-ldap
--with-selinux --with-passprompt=[sudo] password for %p: --with-linux-audit
--with-sssd
^^^^^^^^^
This is important.
LS