<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">I hope this helps pinpoint the issue:<div class=""><a href="https://fedorahosted.org/sssd/wiki/HOWTO_Troubleshoot_SUDO" class="">https://fedorahosted.org/sssd/wiki/HOWTO_Troubleshoot_SUDO</a></div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On 18 Dec 2016, at 10:04, Ben .T.George <<a href="mailto:bentech4you@gmail.com" class="">bentech4you@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">Hi List,<div class=""><br class=""></div><div class="">please help me to implement sudo rules.</div><div class=""><br class=""></div><div class="">i have did below steps and still not working for me.</div><div class=""><br class=""></div><div class="">1. created "<span style="color:rgb(51,51,51);font-family:"open sans",helvetica,arial,sans-serif" class="">Sudo Command Groups"</span></div><div class=""><span style="color:rgb(51,51,51);font-family:"open sans",helvetica,arial,sans-serif" class="">2. Added some command (/bin/yum) and included in sudo group</span></div><div class=""><span style="color:rgb(51,51,51);font-family:"open sans",helvetica,arial,sans-serif" class="">3. created "sudo Rule" on that</span></div><div class=""><span style="color:rgb(51,51,51);font-family:"open sans",helvetica,arial,sans-serif" class=""> * added sudo Option as "</span><span style="color:rgb(51,51,51);font-family:"open sans",helvetica,arial,sans-serif;font-size:12px" class="">!authenticate"</span></div><div class=""><span style="color:rgb(51,51,51);font-family:"open sans",helvetica,arial,sans-serif;font-size:12px" class=""> * Added User Group.</span></div><div class=""><span style="color:rgb(51,51,51);font-family:"open sans",helvetica,arial,sans-serif;font-size:12px" class=""> * Added one Host</span></div><div class=""><span style="color:rgb(51,51,51);font-family:"open sans",helvetica,arial,sans-serif;font-size:12px" class=""> * And under Run command, selected the Sudo Rule Group.</span></div><div class=""><span style="color:rgb(51,51,51);font-family:"open sans",helvetica,arial,sans-serif;font-size:12px" class=""><br class=""></span></div><div class=""><font color="#333333" face="open sans, helvetica, arial, sans-serif" class=""><span style="font-size:12px" class="">I tried logout and login again on client with IPA user which is member of user group. </span></font></div><div class=""><font color="#333333" face="open sans, helvetica, arial, sans-serif" class=""><span style="font-size:12px" class=""><br class=""></span></font></div><div class=""><font color="#333333" face="open sans, helvetica, arial, sans-serif" class=""><span style="font-size:12px" class="">When i am running yum, getting error that user is not allowed to execute command.</span></font></div><div class=""><font color="#333333" face="open sans, helvetica, arial, sans-serif" class=""><span style="font-size:12px" class=""><br class=""></span></font></div><div class=""><font color="#333333" face="open sans, helvetica, arial, sans-serif" class=""><span style="font-size:12px" class=""><br class=""></span></font></div><div class=""><font color="#333333" face="open sans, helvetica, arial, sans-serif" class=""><span style="font-size:12px" class="">Please anyone help to correct my steps.</span></font></div><div class=""><font color="#333333" face="open sans, helvetica, arial, sans-serif" class=""><span style="font-size:12px" class=""><br class=""></span></font></div><div class=""><font color="#333333" face="open sans, helvetica, arial, sans-serif" class=""><span style="font-size:12px" class="">Regards</span></font></div><div class=""><font color="#333333" face="open sans, helvetica, arial, sans-serif" class=""><span style="font-size:12px" class="">Ben</span></font></div></div> -- <br class="">Manage your subscription for the Freeipa-users mailing list:<br class=""><a href="https://www.redhat.com/mailman/listinfo/freeipa-users" class="">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br class="">Go to http://freeipa.org for more info on the project</div></blockquote></div><br class=""></div></body></html>