Hi,

On Tue, Nov 29, 2022 at 1:10 AM Kevin Vasko <kvasko@gmail.com> wrote:
We have a local user that has an entry in sudoers for a “NOPASSWD”.

In /etc/nsswitch.conf we have:

sudoers: files sss

What is in 'passwd:' and 'group:'?
Do you use 'id_provider=files' in 'sssd.conf'?
 

For some reason sssd is falling back to sssd even though we have the “files” entry first and is checking our FreeIPA instance and rejecting it and prompts for password.

if I make it

sudoers: files

It works.

This was working without issue on 18.04, we upgraded to 20.04 and now see the problem.

I guess this is Ubuntu version?
Could you please specify SSSD package versions?
 

Is there a way to make it prioritize the local sudoers and stop looking on sssd?