Re: [Freeipa-users] FreeIPA, version: 4.1.0 and sudo configuration

2015-04-08 Thread Martin Chamambo
From: Jakub Hrozek [jhro...@redhat.com] Sent: Wednesday, April 08, 2015 2:01 PM To: Martin Chamambo Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] FreeIPA, version: 4.1.0 and sudo configuration On Wed, Apr 08, 2015 at 01:39:44PM +0200, Chamambo Martin wrote: > Sudo se

Re: [Freeipa-users] FreeIPA, version: 4.1.0 and sudo configuration

2015-04-08 Thread Martin Chamambo
From: Jakub Hrozek [jhro...@redhat.com] Sent: Wednesday, April 08, 2015 2:01 PM To: Martin Chamambo Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] FreeIPA, version: 4.1.0 and sudo configuration On Wed, Apr 08, 2015 at 01:39:44PM +0200, Chamambo

Re: [Freeipa-users] FreeIPA, version: 4.1.0 and sudo configuration

2015-04-08 Thread Jakub Hrozek
On Wed, Apr 08, 2015 at 01:39:44PM +0200, Chamambo Martin wrote: > Sudo seems to be configured correctly but somehow it's not working > > Even if I do a sudo -l under the admin user > > [admin@ironhide tmp]$ sudo -l > [sudo] password for admin: > Matching Defaults entries for admin on this hos

Re: [Freeipa-users] FreeIPA, version: 4.1.0 and sudo configuration

2015-04-08 Thread Chamambo Martin
): Returning 1 rules for [ad...@ai.co.zw] (Wed Apr 8 13:35:44 2015) [sssd[sudo]] [client_recv] (0x0200): Client disconnected! -Original Message- From: freeipa-users-boun...@redhat.com [mailto:freeipa-users-boun...@redhat.com] On Behalf Of Chamambo Martin Sent: Wednesday, April 08

Re: [Freeipa-users] FreeIPA, version: 4.1.0 and sudo configuration

2015-04-08 Thread Chamambo Martin
) (madagascar.ai.co.zw,-,ai.co.zw) (nemo.ai.co.zw,-,ai.co.zw) [root@ironhide ~]# -Original Message- From: Jakub Hrozek [mailto:jhro...@redhat.com] Sent: Wednesday, April 08, 2015 10:35 AM To: Chamambo Martin Cc: freeipa-users@redhat.com; 'Lukas Slebodnik' Subject: Re: [Freeipa-users] FreeIP

Re: [Freeipa-users] FreeIPA, version: 4.1.0 and sudo configuration

2015-04-08 Thread Jakub Hrozek
On Wed, Apr 08, 2015 at 10:17:59AM +0200, Chamambo Martin wrote: > I have this log after doing a debug_level=6 in the sudo section and have > attached a txt file for the ldbsearch -H /var/lib/sss/db/cache_ai.co.zw.ldb > > (Wed Apr 8 10:14:52 2015) [sssd[sudo]] [sudosrv_get_sudorules_query_cache

Re: [Freeipa-users] FreeIPA, version: 4.1.0 and sudo configuration

2015-04-08 Thread Chamambo Martin
reeipa-users@redhat.com; 'Lukas Slebodnik' Subject: Re: [Freeipa-users] FreeIPA, version: 4.1.0 and sudo configuration On Wed, Apr 08, 2015 at 10:00:50AM +0200, Chamambo Martin wrote: > I have these logs and cant seem to make sense of them These are not the logs we asked for. What we

Re: [Freeipa-users] FreeIPA, version: 4.1.0 and sudo configuration

2015-04-08 Thread Jakub Hrozek
On Wed, Apr 08, 2015 at 10:00:50AM +0200, Chamambo Martin wrote: > I have these logs and cant seem to make sense of them These are not the logs we asked for. What we need is debug_level=6 in the sudo section, then run sudo, then attach /var/log/sssd/sssd_sudo.log. It would also be nice if you c

Re: [Freeipa-users] FreeIPA, version: 4.1.0 and sudo configuration

2015-04-08 Thread Chamambo Martin
From: freeipa-users-boun...@redhat.com [mailto:freeipa-users-boun...@redhat.com] On Behalf Of Jakub Hrozek Sent: Wednesday, April 08, 2015 9:40 AM To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] FreeIPA, version: 4.1.0 and sudo configuration On Wed, Apr 08, 2015 at 09:25:33AM +0200, C

Re: [Freeipa-users] FreeIPA, version: 4.1.0 and sudo configuration

2015-04-08 Thread Lukas Slebodnik
On (08/04/15 09:25), Chamambo Martin wrote: >Good day > >I am running FreeIPA, version: 4.1.0 and everything is working well except >SUDO configuration. > ipa-client-install on CentOS 7.1 should configure sudo by default. >I have 3 questions > > 1: I have configured the bare minimum sudo co

Re: [Freeipa-users] FreeIPA, version: 4.1.0 and sudo configuration

2015-04-08 Thread Jakub Hrozek
On Wed, Apr 08, 2015 at 09:25:33AM +0200, Chamambo Martin wrote: > Good day > > I am running FreeIPA, version: 4.1.0 and everything is working well except > SUDO configuration. > > I have 3 questions > > 1: I have configured the bare minimum sudo configuration without > hostgroups and net