sudo -ll does not list the rule names when sssd is used.
Issue
- When SSSD is configured to get the sudo entries, the sudo long listing option does not list the rule names.
- If there are 100s of rules present, it is difficult to then name of the rule allowed/denied sudo commands.
For Example:
# sudo -ll -U luser1
User luser1 may run the following commands on this host:
**LDAP Role: storage**
RunAsUsers: ALL
Commands:
/bin/fdisk
**LDAP Role: passwd**
RunAsUsers: ALL
Commands:
/usr/bin/passwd
[root@dhcp210-115 sssd]#
sudo_SSS
[root@dhcp210-115 sssd]# !vi
vi /etc/sudo-ldap.conf
[root@dhcp210-115 sssd]# vi /etc/nsswitch.conf
[root@dhcp210-115 sssd]# sudo -ll -U luser1
User luser1 may run the following commands on this host:
RunAsUsers: ALL
Commands:
/bin/fdisk
RunAsUsers: root
Commands:
/usr/bin/passwd
RunAsUsers: ALL
Commands:
/bin/be_admkn
- While use ldap, it lists the rule, and the rule name is missing with sssd.
Environment
- sudo-1.8.6p3-7.el6
- Red Hat Enterprise Linux
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.