Here's a rough hack. It follows the steps in the test script. I tested it out and it works. -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: ipa-client-sudo URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20110218/f01921a4/attachment.ksh>