Bug 1006447
| Summary: | sudo -ll does not list the rule names when sssd is used. | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Najmuddin Chirammal <nc> | ||||
| Component: | sudo | Assignee: | Daniel Kopeček <dkopecek> | ||||
| Status: | CLOSED ERRATA | QA Contact: | David Spurek <dspurek> | ||||
| Severity: | medium | Docs Contact: | |||||
| Priority: | medium | ||||||
| Version: | 6.4 | CC: | bugzilla_rhn, dspurek, ebenes, jhrozek, ksrot, pbrezina, pvrabec, ronaldochaves, yjog | ||||
| Target Milestone: | rc | ||||||
| Target Release: | --- | ||||||
| Hardware: | All | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | sudo-1.8.6p3-13.el6 | Doc Type: | Bug Fix | ||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | |||||||
| : | 1088464 (view as bug list) | Environment: | |||||
| Last Closed: | 2014-10-14 06:45:52 UTC | Type: | Bug | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Bug Depends On: | |||||||
| Bug Blocks: | 1088464 | ||||||
| Attachments: |
|
||||||
Created attachment 897899 [details]
proposed patch
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2014-1484.html After update to this version, sssd + ldap + sudo stop working. Hi Ronaldo, thank you for the information. If you have a problem then contact our Global support services. |
Description of problem: When SSSD is configured to get the sudo entries, the sudo long listing option does not list the rule names. If there are 100s of rules present, it is difficult to then name of the rule allowed/denied sudo commands. Version-Release number of selected component (if applicable): sudo-1.8.6p3-7.el6 How reproducible: Always. Steps to Reproduce: 1. Setup Client to use 'sss' for sudoers 2. execute sudo -ll Actual results: sudo -ll does not list the rule name(s). Expected results: long listing includes the rule name. Additional info: Example: ------------------------------ sudo_LDAP # sudo -ll -U luser1 User luser1 may run the following commands on this host: **LDAP Role: storage** RunAsUsers: ALL Commands: /bin/fdisk **LDAP Role: passwd** RunAsUsers: ALL Commands: /usr/bin/passwd [root@dhcp210-115 sssd]# sudo_SSS [root@dhcp210-115 sssd]# !vi vi /etc/sudo-ldap.conf [root@dhcp210-115 sssd]# vi /etc/nsswitch.conf [root@dhcp210-115 sssd]# sudo -ll -U luser1 User luser1 may run the following commands on this host: RunAsUsers: ALL Commands: /bin/fdisk RunAsUsers: root Commands: /usr/bin/passwd RunAsUsers: ALL Commands: /bin/be_admkn ------------------------------ As you can see, when we use ldap, it lists the rule, and the rule name is missing with sssd.