[SSSD-users] sssd-ad : AD Authenticated users cant run 'su -' or 'su - root'
Chris Price
cprice at its.to
Fri Jan 16 14:35:35 UTC 2015
On 1/15/2015 2:26 PM, Lukas Slebodnik wrote:
> That's interesting. Are you able to login with ssh to the machine
> with two+ users in parallel sessions.
Yes, see my reply to Jakub immediately prior to this list post.
> Is there anything interesting in /var/log/secure?
Strangely, nothing at all gets logged to /var/log/secure when there is a
su failure as described in my previous email to Jakub.
> I can see you have enabled debugging in domain section.
> You can filter the most critical message with next grep command.
>
> grep -E': grep -E "\(0x00[1-9]0\)" /var/log/sssd/sssd_CORPTEST.LOCAL.log
Cheers for that!
> You can read Jakub's blog post.
> "Enrolling an Active Directory RHEL-6 client machine using adcli"
> http://jhrozek.livejournal.com/3581.html
I dont have adcli. On this stock rhel66 system.
Chris
More information about the sssd-users
mailing list