[SSSD-users] sssd-ad : AD Authenticated users cant run 'su -' or 'su - root'

Lukas Slebodnik lslebodn at redhat.com
Fri Jan 16 14:38:52 UTC 2015


On (16/01/15 07:35), Chris Price wrote:
>
>On 1/15/2015 2:26 PM, Lukas Slebodnik wrote:
>>That's interesting. Are you able to login with ssh to the machine
>>with two+ users in parallel sessions.
>
>  Yes, see my reply to Jakub immediately prior to this list post.
>
>>Is there anything interesting in /var/log/secure?
>
>Strangely, nothing at all gets logged to /var/log/secure when there is a su
>failure as described in my previous email to Jakub.
>
>>I can see you have enabled debugging in domain section.
>>You can filter the most critical message with next grep command.
>>
>>grep -E': grep -E "\(0x00[1-9]0\)" /var/log/sssd/sssd_CORPTEST.LOCAL.log
>
>Cheers for that!
>
>>You can read Jakub's blog post.
>>"Enrolling an Active Directory RHEL-6 client machine using adcli"
>>http://jhrozek.livejournal.com/3581.html
>
>I dont have adcli. On this stock rhel66 system.
It is not in rhel6.6. It is just in epel6

LS


More information about the sssd-users mailing list