<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">no problem, thanks for trying! I just figured it out.<div><br></div><div>yum -y install libsss_sudo fixed it. Should this package be a dependency that gets pulled in when IPA client is installed? shall I file a bug?</div><div><br></div><div>Thanks,</div><div>Brian</div><div><div><br><div> <span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; border-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">---<br>Brian Cook<br>Solutions Architect, Red Hat, Inc.<br>407-212-7079<br><br><br></div></span> </div> <br><div><div>On Mar 21, 2013, at 8:50 PM, Brian Cook <<a href="mailto:bcook@redhat.com">bcook@redhat.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><meta http-equiv="Content-Type" content="text/html charset=us-ascii"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Those packages are installed. The second part is against what I am trying to accomplish. My sudo rule is already created in IPA. I just need SSSD to fetch it.</div><div><br></div><div>Thanks,</div><div>Brian</div><div><br></div><br><div><div>On Mar 21, 2013, at 8:37 PM, John Moyer <<a href="mailto:john.moyer@digitalreasoning.com">john.moyer@digitalreasoning.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><meta http-equiv="Content-Type" content="text/html charset=us-ascii"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">I had sudo issues similar to this, I can't remember the exact fix. I have the following two things in my notes. The second command would obviously need you to add the people you want to be able to sudo to the admins group after you add this. <div><br><div><span style="color: rgb(51, 51, 51); font-family: Arial, Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 17.328125px; text-align: left; background-color: rgb(255, 255, 255); ">yum install ipa-client fprintd-pam -y</span></div><div><div style="text-align: left;"><span style="color: rgb(51, 51, 51); font-family: Arial, Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 17.328125px; background-color: rgb(255, 255, 255); ">echo "%admins ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers</span></div><div style="text-align: left;"><span style="color: rgb(51, 51, 51); font-family: Arial, Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 17.328125px; background-color: rgb(255, 255, 255); "><br></span></div><div style="text-align: left;"><span style="color: rgb(51, 51, 51); font-family: Arial, Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 17.328125px; background-color: rgb(255, 255, 255); "><br></span></div><div apple-content-edited="true"> <div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div style="font-weight: normal; font-family: Calibri, sans-serif; font-size: 14px; ">Thanks, </div><div style="font-weight: normal; font-family: Calibri, sans-serif; font-size: 14px; ">_____________________________________________________</div><div style="font-weight: normal; font-family: Calibri, sans-serif; font-size: 14px; ">John Moyer<br></div><div style="font-weight: normal; font-family: Calibri, sans-serif; font-size: 14px; "><br></div><div style="font-weight: normal; font-family: Calibri, sans-serif; font-size: 14px; "><br></div></div></div></div></div></div></div></div></div><div><div>On Mar 21, 2013, at 11:27 PM, Brian Cook <<a href="mailto:bcook@redhat.com">bcook@redhat.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><meta http-equiv="Content-Type" content="text/html charset=us-ascii"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Running F18 and following the instructions here:<div><a href="http://jhrozek.fedorapeople.org/sssd/1.9.1/man/sssd-sudo.5.html">http://jhrozek.fedorapeople.org/sssd/1.9.1/man/sssd-sudo.5.html</a></div><div><br></div><div>When I try to run sudo -l as any user I get the following error:</div><div><div><br></div><div>bash-4.2$ sudo -l</div><div>sudo: Unable to dlopen /usr/lib64/libsss_sudo.so: (null)</div><div>sudo: Unable to initialize SSS source. Is SSSD installed on your machine?</div></div><div><br></div><div><br></div><div>Nothing particularly interesting in the log with debug at 5.</div><div><br></div><div>Can someone point me in the right direction?</div><div><br></div><div>Thanks,</div><div>Brian</div><div><br></div><div><br></div><div>sssd.conf:</div><div><div><br></div><div>[domain/<a href="http://example.com/">example.com</a>]</div><div>debug_level = 5</div><div>cache_credentials = True</div><div>krb5_store_password_if_offline = True</div><div>ipa_domain = <a href="http://example.com/">example.com</a></div><div>id_provider = ipa</div><div>auth_provider = ipa</div><div>access_provider = ipa</div><div>ipa_hostname = <a href="http://ipadevel.example.com/">ipadevel.example.com</a></div><div>chpass_provider = ipa</div><div>ipa_server = <a href="http://ipadevel.example.com/">ipadevel.example.com</a></div><div>ldap_tls_cacert = /etc/ipa/ca.crt</div><div><br></div><div>sudo_provider = ldap</div><div>ldap_uri = <a href="ldap://ipadevel.example.com">ldap://ipadevel.example.com</a></div><div>ldap_sudo_search_base = ou=sudoers,dc=example,dc=com</div><div>ldap_sasl_mech = GSSAPI</div><div>ldap_sasl_authid = host/<a href="http://ipadevel.example.com/">ipadevel.example.com</a></div><div>ldap_sasl_realm = <a href="http://example.com/">EXAMPLE.COM</a></div><div>krb5_server = <a href="http://ipadevel.example.com/">ipadevel.example.com</a></div><div><br></div><div><br></div><div>[sssd]</div><div>services = nss, pam, ssh, sudo</div><div>config_file_version = 2</div><div>domains = <a href="http://example.com/">example.com</a></div><div><br></div><div>[nss]</div><div><br></div><div>[pam]</div><div><br></div><div>[sudo]</div><div>debug_level=5</div><div><br></div><div>[autofs]</div><div><br></div><div>[ssh]</div><div><br></div><div>[pac]</div><div><br></div><div><br></div></div></div>_______________________________________________<br>Freeipa-users mailing list<br><a href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a><br><a href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></blockquote></div><br></div></div></div></blockquote></div><br></div>_______________________________________________<br>Freeipa-users mailing list<br><a href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a><br>https://www.redhat.com/mailman/listinfo/freeipa-users</blockquote></div><br></div></div></body></html>