<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/4.6.6">
</HEAD>
<BODY>
On Sat, 2013-09-07 at 19:35 -0400, Dmitri Pal wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
On 09/07/2013 02:11 PM, Christian Horn wrote:
<FONT COLOR="#737373">> On Sat, Sep 07, 2013 at 12:06:37PM -0500, Dean Hunter wrote:</FONT>
<FONT COLOR="#737373">>> Are [1] and[2] still the current and best sources of information for</FONT>
<FONT COLOR="#737373">>> configuring sudo for use with the current release of FreeIPA on Fedora</FONT>
<FONT COLOR="#737373">>> 19?</FONT>
<FONT COLOR="#737373">>></FONT>
<FONT COLOR="#737373">>> 1.</FONT>
<FONT COLOR="#737373">>> <A HREF="http://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_Guide/sudo.html">http://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_Guide/sudo.html</A></FONT>
<FONT COLOR="#737373">>> 2.</FONT>
<FONT COLOR="#737373">>> <A HREF="http://www.freeipa.org/images/7/77/Freeipa30_SSSD_SUDO_Integration.pdf">http://www.freeipa.org/images/7/77/Freeipa30_SSSD_SUDO_Integration.pdf</A></FONT>
<FONT COLOR="#737373">> There is also the Identity_Management_Guide as part of the RHEL</FONT>
<FONT COLOR="#737373">> product documentation:</FONT>
<FONT COLOR="#737373">> <A HREF="https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html-single/Identity_Management_Guide/index.html">https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html-single/Identity_Management_Guide/index.html</A></FONT>
This and the pdf above are the latest word in this area.
<FONT COLOR="#737373">> Christian</FONT>
<FONT COLOR="#737373">></FONT>
<FONT COLOR="#737373">> _______________________________________________</FONT>
<FONT COLOR="#737373">> Freeipa-users mailing list</FONT>
<FONT COLOR="#737373">> <A HREF="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</A></FONT>
<FONT COLOR="#737373">> <A HREF="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</A></FONT>
</PRE>
</BLOCKQUOTE>
Some sudo rules are causing:<BR>
<BR>
<TT> [<A HREF="mailto:dean@desktop2">dean@desktop2</A> ~]$ sudo id</TT><BR>
<TT> sudo: internal error, tried to erealloc3(0)</TT><BR>
<BR>
, but others do not. In the trial and error process of determining which rule specifications are causing the error, I have been restarting the virtual machine I am using as the sudo client between tests. Is there a better way to clear the SSSD cache between trials to make sure I am testing the most recent rule change?<BR>
<BR>
</BODY>
</HTML>