slek kus via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org>
writes:
Hi Jochen, nsswitch.conf checks local files and sss. Below is the
contents of etc/pam.d/sudo:
I think that sssd is ok here. I didn't verify the RBAC rule in detail,
but ALLOWED looks ok for me.
Did you have a look at
https://docs.pagure.org/sssd.sssd/users/sudo_troubleshooting.html ?
Verify the sssd.conf file as described at the start of the page and then
produce debug logs:
How do I get sudo logs?
Open /etc/sudo.conf and put down the following lines:
Debug sudo /var/log/sudo_debug all@debug
Debug sudoers.so /var/log/sudo_debug all@debug
Run sudo
File /var/log/sudo_debug contains sudo logs
My current guess is that sudo is at fault here - take a look at the
debug log.
Jochen
--
This space is intentionally left blank.