<html><head></head><body><div style="color:#000; background-color:#fff; font-family:verdana, helvetica, sans-serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1487066411151_23637">Hi,</div><div id="yui_3_16_0_ym19_1_1487066411151_23559">Was there any out-come to this?</div><div id="yui_3_16_0_ym19_1_1487066411151_23573"><br></div><div id="yui_3_16_0_ym19_1_1487066411151_23590" dir="ltr">I running: <span id="yui_3_16_0_ym19_1_1487066411151_23597">sudo1.8.12-1ubuntu3, which is well behind up to date releases.</span></div><div dir="ltr" id="yui_3_16_0_ym19_1_1487066411151_23622"><span id="yui_3_16_0_ym19_1_1487066411151_23597"><br></span></div><div class="qtdSeparateBR" id="yui_3_16_0_ym19_1_1487066411151_23557"><div id="yui_3_16_0_ym19_1_1487066411151_23623">Many thanks,</div><div id="yui_3_16_0_ym19_1_1487066411151_23624">James Harrison<br></div><br></div><div class="yahoo_quoted" id="yui_3_16_0_ym19_1_1487066411151_23556" style="display: block;"> <div style="font-family: verdana, helvetica, sans-serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1487066411151_23555"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif; font-size: 16px;" id="yui_3_16_0_ym19_1_1487066411151_23554"> <div dir="ltr" id="yui_3_16_0_ym19_1_1487066411151_23553"> <font id="yui_3_16_0_ym19_1_1487066411151_23552" size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> James Harrison <jamesaharrisonuk@yahoo.co.uk><br> <b><span style="font-weight: bold;">To:</span></b> "freeipa-users@redhat.com" <freeipa-users@redhat.com>; "pbrezina@redhat.com" <pbrezina@redhat.com> <br><b><span style="font-weight: bold;">Cc:</span></b> "pbrezina@redhat.com" <pbrezina@redhat.com><br> <b><span style="font-weight: bold;">Sent:</span></b> Monday, 9 January 2017, 15:18<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [Freeipa-users] FreeIPA sudo not working on ububtu xenial sssd version 1.13.4-1ubuntu1.1<br> </font> </div> <div class="y_msg_container" id="yui_3_16_0_ym19_1_1487066411151_23591"><br><div id="yiv7372503004"><div id="yui_3_16_0_ym19_1_1487066411151_23593"><div style="color:#000;background-color:#fff;font-family:verdana, helvetica, sans-serif;font-size:16px;" id="yui_3_16_0_ym19_1_1487066411151_23592"><div id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22267"><span>Hi All,</span></div><div dir="ltr" id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22282"><span id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22390">I have attached three files from running sudo -i on the same machine enrolled into Free IPA. They have the output from various versions of sudo. tail -f sudo_debug, syslog, auth.log and sssd/*.log from /var/log to show chronological order of events.<br clear="none"></span></div><div dir="ltr" id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_23348"><span></span><br clear="none">The attached files are: </div><div dir="ltr" id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_23041"><span id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_23063">sudo-1.8.19-1.txt --- from Debian<br id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_23060" clear="none">sudo-1.8.16-0ubuntu1.2.txt --- Current released Xenial sudo<br id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_23061" clear="none">sudo1.8.12-1ubuntu3.txt --- Previous sudo from "wily" <a rel="nofollow" shape="rect" class="yiv7372503004" id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_23140" target="_blank" href="https://launchpad.net/ubuntu/wily/amd64/sudo/1.8.12-1ubuntu3">https://launchpad.net/ubuntu/wily/amd64/sudo/1.8.12-1ubuntu3</a><br id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_23062" clear="none"><br clear="none"></span></div><div id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22362"><span id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_23333">The machine's /etc/sudo.conf has:</span></div><div class="yiv7372503004qtdSeparateBR" id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22268">Debug sudo /var/log/sudo_debug all@debug<br id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22357" clear="none">Debug sudoers.so /var/log/sudo_debug all@debug<br id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22358" clear="none">Plugin sudoers_policy sudoers.so<br id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22360" clear="none">Plugin sudoers_io sudoers.so<br id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22361" clear="none"><div dir="ltr" id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22488"><br clear="none"></div><div dir="ltr" id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22492">Hope this helps.</div><div dir="ltr" id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_23459"><br clear="none"></div><div dir="ltr" id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_23465">Regards,</div><div dir="ltr" id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_23466">James Harrison<br clear="none"></div><br clear="none"></div><div class="yiv7372503004yqt8370077045" id="yiv7372503004yqt23084"><div class="yiv7372503004yahoo_quoted" id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22272" style="display:block;"> <div id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22271" style="font-family:verdana, helvetica, sans-serif;font-size:16px;"> <div id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22270" style="font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif;font-size:16px;"> <div dir="ltr" id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22269"> <font id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22273" size="2" face="Arial"> </font><hr id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22274" size="1"> <b id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22335"><span id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22334" style="font-weight:bold;">From:</span></b> Lukas Slebodnik <lslebodn@redhat.com><br clear="none"> <b id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22333"><span id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22332" style="font-weight:bold;">To:</span></b> James Harrison <jamesaharrisonuk@yahoo.co.uk> <br clear="none"><b id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22331"><span id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22330" style="font-weight:bold;">Cc:</span></b> "freeipa-users@redhat.com" <freeipa-users@redhat.com>; pbrezina@redhat.com<br clear="none"> <b><span style="font-weight:bold;">Sent:</span></b> Monday, 9 January 2017, 13:09<br clear="none"> <b><span style="font-weight:bold;">Subject:</span></b> Re: [Freeipa-users] FreeIPA sudo not working on ububtu xenial sssd version 1.13.4-1ubuntu1.1<br clear="none"> </div> <div class="yiv7372503004y_msg_container" id="yiv7372503004yui_3_16_0_ym19_1_1483959579634_22276"><br clear="none">On (09/01/17 12:44), James Harrison wrote:<br clear="none">>All,debian 1.8.19-1 doesnt work, but Ubuntu 1.8.12-1ubuntu3 does.<br clear="none">><br clear="none">Could you provide sudo logs with 1.8.19-1<br clear="none"><a rel="nofollow" shape="rect" target="_blank" href="https://fedorahosted.org/sssd/wiki/HOWTO_Troubleshoot_SUDO">https://fedorahosted.org/sssd/wiki/HOWTO_Troubleshoot_SUDO</a><br clear="none"><br clear="none">sssd log files will be helpfull as well.<div class="yiv7372503004yqt2511133141" id="yiv7372503004yqtfd16088"><br clear="none"><br clear="none"><br clear="none">LS<br clear="none"></div><br clear="none"><br clear="none"></div> </div> </div> </div></div></div></div></div><br><br></div> </div> </div> </div></div></body></html>