[SSSD-users] sssd-ad : AD Authenticated users cant run 'su -' or 'su - root'

Chris Price cprice at its.to
Fri Jan 16 14:35:35 UTC 2015


On 1/15/2015 2:26 PM, Lukas Slebodnik wrote:
> That's interesting. Are you able to login with ssh to the machine
> with two+ users in parallel sessions.

   Yes, see my reply to Jakub immediately prior to this list post.

> Is there anything interesting in /var/log/secure?

Strangely, nothing at all gets logged to /var/log/secure when there is a 
su failure as described in my previous email to Jakub.

> I can see you have enabled debugging in domain section.
> You can filter the most critical message with next grep command.
>
> grep -E': grep -E "\(0x00[1-9]0\)" /var/log/sssd/sssd_CORPTEST.LOCAL.log

Cheers for that!

> You can read Jakub's blog post.
> "Enrolling an Active Directory RHEL-6 client machine using adcli"
> http://jhrozek.livejournal.com/3581.html

I dont have adcli. On this stock rhel66 system.

Chris


More information about the sssd-users mailing list