IPA sudo error sudo: ldap_sasl_bind_s(): Invalid credentials
Issue
When attempting to connect run sudo commands on a client that is using IPA for sudo rules the debug messages show:
sudo: ldap_initialize(ld, ldap://ipaserver.example.com)
sudo: ldap_set_option: debug -> 0
sudo: ldap_set_option: ldap_version -> 3
sudo: ldap_set_option: tls_checkpeer -> 1
sudo: ldap_set_option: tls_cacertfile -> /etc/ipa/ca.crt
sudo: ldap_set_option: tls_cacert -> /etc/ipa/ca.crt
sudo: ldap_set_option: timelimit -> 15
sudo: ldap_set_option(LDAP_OPT_NETWORK_TIMEOUT, 5)
sudo: ldap_start_tls_s() ok
sudo: ldap_sasl_bind_s(): Invalid credentials
[sudo] password for test_user:
test_user is not in the sudoers file. This incident will be reported.
Environment
- Red Hat Enterprise Linux 6
- IPA/IdM
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.