Bug 1000362

Summary: sudo + sssd + local user sends e-mail to administrator
Product: [Fedora] Fedora Reporter: Lukas Slebodnik <lslebodn>
Component: sudoAssignee: Daniel Kopeček <dkopecek>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 19CC: abokovoy, dkopecek, kzak, sgallagh
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: sudo-1.8.6p7-2.fc19 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-12-21 02:24:54 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Lukas Slebodnik 2013-08-23 09:35:38 UTC
Description of problem:
When sudo is used with sssd and a local user runs sudo, an e-mail is sent to administrator, because sssd does not support sudo rules for local users. It is not an error, only noise.

Version-Release number of selected component (if applicable):
shel$ rpm -q sudo
sudo-1.8.6p7-1.fc19.x86_64

Steps to Reproduce:
1. configure sudo to use sssd as data source ('sudoers: files sss' in /etc/nsswitch.conf
2. run sssd
3. log in as local user
4. run 'sudo -l' as local user
  
Actual results:
E-mail is sent to administrator:
"problem with defaults entries ; TTY=pts/2 ; PWD=/home/fuero"

Expected results:
No e-mail is sent.

Additional info:
The bug has already been fixed in RHEL6.4
https://bugzilla.redhat.com/show_bug.cgi?id=879633

This bug is in fedora 19, thus it have to be in RHEL7.

Comment 1 Alexander Bokovoy 2013-12-18 22:10:10 UTC
This bug prevents use of sudo rules with SSSD against FreeIPA in Fedora 19.

David, please fix it asap. No reaction in 4 months is a shame.

Comment 2 Alexander Bokovoy 2013-12-19 12:27:23 UTC
I've used patch from 1.8.8 from rawhide, added a fix from RHEL6.4 mentioned in the bug 879633 and built this scratch build: http://koji.fedoraproject.org/koji/taskinfo?taskID=6314141 for Fedora 19.

Feel free to reuse, we need a fix in Fedora 19.

Comment 3 Fedora Update System 2013-12-19 18:35:36 UTC
sudo-1.8.6p7-2.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/sudo-1.8.6p7-2.fc19

Comment 4 Fedora Update System 2013-12-21 02:24:54 UTC
sudo-1.8.6p7-2.fc19 has been pushed to the Fedora 19 stable repository.  If problems still persist, please make note of it in this bug report.