On Wed, Sep 13, 2017 at 11:05:25PM +0300, Alexander Bokovoy via FreeIPA-users wrote:
On ke, 13 syys 2017, Mark Haney via FreeIPA-users wrote:
> On 09/13/2017 03:44 PM, Răzvan Corneliu C.R. VILT via FreeIPA-users wrote:
> > Hi Mark,
> >
> > Not all CentOS releases are created equal. Support for Sudo appeared
> > later in IPA and you’ll probably need to update sssd and ipa-client.
> > The one in 6.8 should work fine. I’ve recently enrolled a few rhel 6.4
> > servers and noticed the same thing but everything was solved after
> > doing a yum update sssd.
> >
> > Cheers,
> > Răzvan
> >
> Unfortunately, sssd is already the 6.9 version:
>
> python-sssdconfig-1.13.3-57.el6_9.noarch
> sssd-common-1.13.3-57.el6_9.x86_64
> sssd-common-pac-1.13.3-57.el6_9.x86_64
> sssd-ad-1.13.3-57.el6_9.x86_64
> sssd-ldap-1.13.3-57.el6_9.x86_64
> sssd-1.13.3-57.el6_9.x86_64
> sssd-client-1.13.3-57.el6_9.x86_64
> sssd-krb5-common-1.13.3-57.el6_9.x86_64
> sssd-ipa-1.13.3-57.el6_9.x86_64
> sssd-krb5-1.13.3-57.el6_9.x86_64
> sssd-proxy-1.13.3-57.el6_9.x86_64
Check sudo version as well.
And if that doesn't help, follow
https://docs.pagure.org/SSSD.sssd/users/sudo_troubleshooting.html
Do you use default_domain_suffix with IPA-AD trusts? That's one thing
that's known to not work on el6..