Hide Forgot
Description of problem: When SSSD is configured to get the sudo entries, the sudo long listing option does not list the rule names. If there are 100s of rules present, it is difficult to then name of the rule allowed/denied sudo commands. Version-Release number of selected component (if applicable): sudo-1.8.6p3-7.el6 How reproducible: Always. Steps to Reproduce: 1. Setup Client to use 'sss' for sudoers 2. execute sudo -ll Actual results: sudo -ll does not list the rule name(s). Expected results: long listing includes the rule name. Additional info: Example: ------------------------------ sudo_LDAP # sudo -ll -U luser1 User luser1 may run the following commands on this host: **LDAP Role: storage** RunAsUsers: ALL Commands: /bin/fdisk **LDAP Role: passwd** RunAsUsers: ALL Commands: /usr/bin/passwd [root@dhcp210-115 sssd]# sudo_SSS [root@dhcp210-115 sssd]# !vi vi /etc/sudo-ldap.conf [root@dhcp210-115 sssd]# vi /etc/nsswitch.conf [root@dhcp210-115 sssd]# sudo -ll -U luser1 User luser1 may run the following commands on this host: RunAsUsers: ALL Commands: /bin/fdisk RunAsUsers: root Commands: /usr/bin/passwd RunAsUsers: ALL Commands: /bin/be_admkn ------------------------------ As you can see, when we use ldap, it lists the rule, and the rule name is missing with sssd.
Created attachment 897899 [details] proposed patch
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2014-1484.html
After update to this version, sssd + ldap + sudo stop working.
Hi Ronaldo, thank you for the information. If you have a problem then contact our Global support services.