[SSSD-users] sssd-ad : AD Authenticated users cant run 'su -' or 'su - root' RESOLVED

Chris Price cprice at its.to
Fri Jan 16 15:11:52 UTC 2015


RESOLVED

Turns out our default 'vanilla' RHEL66 kickstart build isnt so 
'vanilla'. I spotted this gem in the post install kickstart log:

sed -i".orig" "s/^\(#\)\(auth\s*required\s*pam_wheel.so.*\)$/\2/" 
/etc/pam.d/su

I was unaware that people wanting to 'su' on our default systems had to 
be part of the 'wheel' group.

Problem was between the keyboard and this dimwitted admin all along. Mea 
Culpa.

Cheers and thanks for your help.



On 1/16/2015 7:55 AM, Lukas Slebodnik wrote:
> On (16/01/15 07:40), Chris Price wrote:
>> I'm trying to make this work without using something outside the rhel66 tree.
>> Is adcli a necessity?
> BTW adcli and (relamd) is available on rhel7
>
> You can also join the Linux client to the AD domain manually with samba
> utilities.
> https://fedorahosted.org/sssd/wiki/Configuring_sssd_with_ad_server#JoiningtheLinuxclienttotheADdomainmanually
>
> LS
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users



More information about the sssd-users mailing list