[SSSD-users] sssd-ad : AD Authenticated users cant run 'su -' or 'su - root'

Chris Price cprice at its.to
Fri Jan 16 14:40:38 UTC 2015


I'm trying to make this work without using something outside the rhel66 
tree. Is adcli a necessity?

On 1/16/2015 7:38 AM, Lukas Slebodnik wrote:
> On (16/01/15 07:35), Chris Price wrote:
>> On 1/15/2015 2:26 PM, Lukas Slebodnik wrote:
>>> That's interesting. Are you able to login with ssh to the machine
>>> with two+ users in parallel sessions.
>>   Yes, see my reply to Jakub immediately prior to this list post.
>>
>>> Is there anything interesting in /var/log/secure?
>> Strangely, nothing at all gets logged to /var/log/secure when there is a su
>> failure as described in my previous email to Jakub.
>>
>>> I can see you have enabled debugging in domain section.
>>> You can filter the most critical message with next grep command.
>>>
>>> grep -E': grep -E "\(0x00[1-9]0\)" /var/log/sssd/sssd_CORPTEST.LOCAL.log
>> Cheers for that!
>>
>>> You can read Jakub's blog post.
>>> "Enrolling an Active Directory RHEL-6 client machine using adcli"
>>> http://jhrozek.livejournal.com/3581.html
>> I dont have adcli. On this stock rhel66 system.
> It is not in rhel6.6. It is just in epel6
>
> LS
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users



More information about the sssd-users mailing list