On Wed, Nov 30, 2016 at 07:14:17AM -0800, Ali, Saqib wrote:
Thanks Jakub. The diagram on your blogpost is really nice.
So the Sudo Rules are cached by the NSS Responder (sssd_nss)?
No, the back end retrieves them from the server and stores the rules into the ldb cache and the sssd_sudo responder delivers them from the cache to sudo.
For sudo troubleshooting you might find: https://fedorahosted.org/sssd/wiki/HOWTO_Troubleshoot_SUDO useful.