[SSSD-users] Re: sudo rules do not get ALL run-as-user

[Jakub Hrozek]

On Fri, Apr 20, 2018 at 01:20:50PM +0200, Dominik George wrote:
>  [ Not subscribed, please Cc in replies. ]
>  
>  Hi,
>  
>  we are usign sssd 1.15.0 on Debian stretch, for everything including sudo.
>  
>  The following LDAP entry…
>  
>  dn: cn=%supraadmin,ou=SUDOers,dc=teckids,dc=org
>  objectClass: top
>  objectClass: sudoRole
>  cn: %supraadmin
>  description: Allow everything for supraadmins
>  sudoUser: %supraadmin
>  sudoCommand: ALL
>  sudoHost: ALL
>  
>  …keeps rendering as this insudo…
>  
>  User nik may run the following commands on ticdesk:
>      (root) ALL
>  
>  …even if I add sudoRunAsUser: ALL explicitly.
>  
>  I already tried wiping the sss cache, with no success. 
I'm sorry, but what should the desired output be here?

>  
>  Any hints on why this happens:
>  
>  Cheers,
>  Nik
>  
>  -- 
>  Dominik George (1. Vorstandsvorsitzender, pädagogischer Leiter)
>  Teckids e.V. - Erkunden, Entdecken, Erfinden.
>  https://www.teckids.org/ 


>  _______________________________________________
>  sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org