Hello, I am trying to setup a few of my users to have the ability to su - jira or another
user using FreeIPA.
Here is what happens when I am logged in as the user and try to su - jira
[user1@jira02 ~]$ sudo su - process[sudo] password for user1:Sorry, user user1 is not
allowed to execute '/bin/su - jira' as root on jira02.example.net.[user1@jira02
~]$
[andrew.meyer@jira02 ~]$ ipa sudorule-show su_jira Rule name: su_jira Enabled: TRUE
Host category: all RunAs User category: all RunAs Group category: all User Groups:
developers, ops_sudoers Sudo Allow Command Groups: jira_access Sudo Option:
!authenticate[andrew.meyer@jira02 ~]$
[andrew.meyer@jira02 ~]$ ipa sudocmd-find su_jira_cmds----------------------1 Sudo Command
matched---------------------- Sudo Command: /usr/bin/su - jira,/usr/bin/sudo su -
jira,/bin/su - jira,/bin/sudo - jira Description:
su_jira_cmds----------------------------Number of entries returned
1----------------------------
What am I doing wrong?