<html><head></head><body><div style="color:#000; background-color:#fff; font-family:verdana, helvetica, sans-serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1483959579634_22267"><span>Hi All,</span></div><div id="yui_3_16_0_ym19_1_1483959579634_22282" dir="ltr"><span id="yui_3_16_0_ym19_1_1483959579634_22390">I have attached three files from running sudo -i on the same machine enrolled into Free IPA. They have the output from various versions of sudo. tail -f sudo_debug, syslog, auth.log and sssd/*.log from /var/log to show chronological order of events.<br></span></div><div id="yui_3_16_0_ym19_1_1483959579634_23348" dir="ltr"><span></span><br>The attached files are: </div><div id="yui_3_16_0_ym19_1_1483959579634_23041" dir="ltr"><span id="yui_3_16_0_ym19_1_1483959579634_23063">sudo-1.8.19-1.txt --- from Debian<br id="yui_3_16_0_ym19_1_1483959579634_23060">sudo-1.8.16-0ubuntu1.2.txt --- Current released Xenial sudo<br id="yui_3_16_0_ym19_1_1483959579634_23061">sudo1.8.12-1ubuntu3.txt --- Previous sudo from "wily" <a href="https://launchpad.net/ubuntu/wily/amd64/sudo/1.8.12-1ubuntu3" id="yui_3_16_0_ym19_1_1483959579634_23140" class="">https://launchpad.net/ubuntu/wily/amd64/sudo/1.8.12-1ubuntu3</a><br id="yui_3_16_0_ym19_1_1483959579634_23062"><br></span></div><div id="yui_3_16_0_ym19_1_1483959579634_22362"><span id="yui_3_16_0_ym19_1_1483959579634_23333">The machine's /etc/sudo.conf has:</span></div><div class="qtdSeparateBR" id="yui_3_16_0_ym19_1_1483959579634_22268">Debug sudo /var/log/sudo_debug all@debug<br id="yui_3_16_0_ym19_1_1483959579634_22357">Debug sudoers.so /var/log/sudo_debug all@debug<br id="yui_3_16_0_ym19_1_1483959579634_22358">Plugin sudoers_policy sudoers.so<br id="yui_3_16_0_ym19_1_1483959579634_22360">Plugin sudoers_io sudoers.so<br id="yui_3_16_0_ym19_1_1483959579634_22361"><div dir="ltr" id="yui_3_16_0_ym19_1_1483959579634_22488"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1483959579634_22492">Hope this helps.</div><div dir="ltr" id="yui_3_16_0_ym19_1_1483959579634_23459"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1483959579634_23465">Regards,</div><div dir="ltr" id="yui_3_16_0_ym19_1_1483959579634_23466">James Harrison<br></div><br></div><div class="yahoo_quoted" id="yui_3_16_0_ym19_1_1483959579634_22272" style="display: block;"> <div style="font-family: verdana, helvetica, sans-serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1483959579634_22271"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1483959579634_22270"> <div dir="ltr" id="yui_3_16_0_ym19_1_1483959579634_22269"> <font id="yui_3_16_0_ym19_1_1483959579634_22273" size="2" face="Arial"> <hr id="yui_3_16_0_ym19_1_1483959579634_22274" size="1"> <b id="yui_3_16_0_ym19_1_1483959579634_22335"><span style="font-weight:bold;" id="yui_3_16_0_ym19_1_1483959579634_22334">From:</span></b> Lukas Slebodnik <lslebodn@redhat.com><br> <b id="yui_3_16_0_ym19_1_1483959579634_22333"><span style="font-weight: bold;" id="yui_3_16_0_ym19_1_1483959579634_22332">To:</span></b> James Harrison <jamesaharrisonuk@yahoo.co.uk> <br><b id="yui_3_16_0_ym19_1_1483959579634_22331"><span style="font-weight: bold;" id="yui_3_16_0_ym19_1_1483959579634_22330">Cc:</span></b> "freeipa-users@redhat.com" <freeipa-users@redhat.com>; pbrezina@redhat.com<br> <b><span style="font-weight: bold;">Sent:</span></b> Monday, 9 January 2017, 13:09<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [Freeipa-users] FreeIPA sudo not working on ububtu xenial sssd version 1.13.4-1ubuntu1.1<br> </font> </div> <div class="y_msg_container" id="yui_3_16_0_ym19_1_1483959579634_22276"><br>On (09/01/17 12:44), James Harrison wrote:<br clear="none">>All,debian 1.8.19-1 doesnt work, but Ubuntu 1.8.12-1ubuntu3 does.<br clear="none">><br clear="none">Could you provide sudo logs with 1.8.19-1<br clear="none"><a shape="rect" href="https://fedorahosted.org/sssd/wiki/HOWTO_Troubleshoot_SUDO" target="_blank">https://fedorahosted.org/sssd/wiki/HOWTO_Troubleshoot_SUDO</a><br clear="none"><br clear="none">sssd log files will be helpfull as well.<div class="yqt2511133141" id="yqtfd16088"><br clear="none"><br clear="none"><br clear="none">LS<br clear="none"></div><br><br></div> </div> </div> </div></div></body></html>