sudo -ll does not list the rule names when sssd is used.

Solution In Progress - Updated -

Issue

  • When SSSD is configured to get the sudo entries, the sudo long listing option does not list the rule names.
  • If there are 100s of rules present, it is difficult to then name of the rule allowed/denied sudo commands.

For Example:

# sudo -ll -U luser1
User luser1 may run the following commands on this host:

**LDAP Role: storage**
    RunAsUsers: ALL
    Commands:
    /bin/fdisk

**LDAP Role: passwd**
    RunAsUsers: ALL
    Commands:
    /usr/bin/passwd
[root@dhcp210-115 sssd]#

sudo_SSS

[root@dhcp210-115 sssd]# !vi
vi /etc/sudo-ldap.conf
[root@dhcp210-115 sssd]# vi /etc/nsswitch.conf
[root@dhcp210-115 sssd]# sudo -ll -U luser1
User luser1 may run the following commands on this host:
    RunAsUsers: ALL
    Commands:
    /bin/fdisk
    RunAsUsers: root
    Commands:
    /usr/bin/passwd
    RunAsUsers: ALL
    Commands:
    /bin/be_admkn

  • While use ldap, it lists the rule, and the rule name is missing with sssd.

Environment

  • sudo-1.8.6p3-7.el6
  • Red Hat Enterprise Linux

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.