[Freeipa-users] FreeIPA / sudo rules / option / secure_path

2024-09-03 Thread alexey safonov via FreeIPA-users
Hi, I've checked all related output in Google search and this mailing list, but still have no answer to a question, why secure_path option is ignored by IPA? here is what I have in IPA Sudo Option: !requiretty, !authenticate, secure_path=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/s

[Freeipa-users] Freeipa sudo

2024-01-05 Thread Dmitry Krasov via FreeIPA-users
Hello. The FreeIpa user has sudo rights on a Ubuntu 2204 desktop machine that is in the FreeIpa Linux domain. It can do sudo su, sudo apt install… But when starting some services and basic installation of applications from the market (in general, when it comes to gui admin rights), it asks the

[Freeipa-users] FreeIPA SUDO rules fail with hostgroups

2021-04-12 Thread Brian Sanders via FreeIPA-users
I have recently found out that when adding SUDO rules to my IPA server, the host groups are not evaluated correctly. I am using the same host groups in my HBAC and they are working correctly. If I remove the host groups from the SUDO rule, and instead directly put the server in as an individua

[Freeipa-users] FreeIPA sudo command

2021-02-02 Thread Mustapha Aissat via FreeIPA-users
Hi all, I have a question regarding sudo command and rules in FreeIPA, is it possible to allow a user to only install packages and not remove? for example the sudo command will look,like : /usr/bin/dnf install * I tried to configure sudo command as "/usr/bin/dnf install" and it didn't work If

[Freeipa-users] FreeIPA Sudo Issue

2017-10-09 Thread Alka Murali via FreeIPA-users
Hello Team, I have integrated my Ubuntu/Debian and CentOS Servers as IPA Clients to my FreeIPA Server. The custom sudo rule added by me also works for the users assigned to the rule. The first login attempt as well as sudo access works fine. However if the user logins later or after few days, the

[Freeipa-users] freeipa sudo expiration

2017-09-05 Thread Scott Lucas via FreeIPA-users
Hi, I have a global password policy set for unlimited on expiration date, however a user who has no issues logging in as himself, got a password expiration notice when he recently used sudo. I can't seem to find anything pertaining to sudo rights expiring in the freeipa gui, is there somewhere spe