[SSSD-users] sssd-ad : AD Authenticated users cant run 'su -' or 'su - root' RESOLVED
Chris Price
cprice at its.to
Fri Jan 16 15:11:52 UTC 2015
RESOLVED
Turns out our default 'vanilla' RHEL66 kickstart build isnt so
'vanilla'. I spotted this gem in the post install kickstart log:
sed -i".orig" "s/^\(#\)\(auth\s*required\s*pam_wheel.so.*\)$/\2/"
/etc/pam.d/su
I was unaware that people wanting to 'su' on our default systems had to
be part of the 'wheel' group.
Problem was between the keyboard and this dimwitted admin all along. Mea
Culpa.
Cheers and thanks for your help.
On 1/16/2015 7:55 AM, Lukas Slebodnik wrote:
> On (16/01/15 07:40), Chris Price wrote:
>> I'm trying to make this work without using something outside the rhel66 tree.
>> Is adcli a necessity?
> BTW adcli and (relamd) is available on rhel7
>
> You can also join the Linux client to the AD domain manually with samba
> utilities.
> https://fedorahosted.org/sssd/wiki/Configuring_sssd_with_ad_server#JoiningtheLinuxclienttotheADdomainmanually
>
> LS
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
More information about the sssd-users
mailing list