[SSSD-users] Empty groups with sssd 1.9.4

Michael Ströder michael at stroeder.com
Fri Feb 22 18:45:57 UTC 2013


Jakub Hrozek wrote:
> On Wed, Feb 20, 2013 at 09:39:26PM +0100, Michael Ströder wrote:
>> Jakub Hrozek wrote:
>>> Feel free to ping this list again if you
>>> can't get the sudo integration working. Please note you need relatively
>>> recent sudo built with the --with-sssd (not sure if Debian would do that
>>> even in -unstable/-testing)
>>
>> Aah, this is a good hint where to look. And yes, I couldn't get it to work
>> under Debian Squeeze.
>>
>> Could you please provide the minimum sudo version required?
> 
> I believe that any 1.8.x version would do, but as I said, the sudo must
> be configured with --with-sssd. 
> 
> Also, I'm not sure from the top of my head how the debian packaging looks
> like, but you'd also need to have the sssd's sudo plugin installed. On
> Fedora the plugin belongs to libsss_sudo package and is stored at
> /usr/lib{,64}/libsss_sudo.so

My colleague packaged recent sudo 1.8.6 with the required build option
--with-sssd today and it simply seems to work. He will upload it to Debian repos.

I have to do some more cache tuning in sssd.conf to let it update the local
cache of the sudoRole entries more quickly without getting too chatty.

Ciao, Michael.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3883 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20130222/406986d9/attachment.p7s>


More information about the sssd-users mailing list