[Freeipa-users] freeIPA client sudo / sssd setup

[Martin Kosek]

On 04/08/2014 10:42 PM, Lukas Slebodnik wrote:
> On (08/04/14 13:34), Nathan Broadbent wrote:
>>>
>>> man sssd-sudo says:
>>> CONFIGURING SSSD TO FETCH SUDO RULES
>>>   All configuration that is needed on SSSD side is
>>>   to extend the list of services with "sudo" in [sssd] section of
>>> sssd.conf(5).
>>>
>>> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>>> I would say it is documented, but nobody pointed you to manual pages.
>>>
>>>
>> Ah, you are right, sorry I said it was undocumented. I think it's a good
>> idea to enable sssd-sudo by default when we run ipa-client-install, or at
>> least, add it as an option to the ipa-client-install script. As a new user,
>> I also spent a while trying to figure out why my sudo rules weren't having
>> any effect.
> 
> Work in progress
> https://fedorahosted.org/freeipa/ticket/3358
> 
> You can add yourself to CC if you are intrested in this ticket.
> 
> LS

Right. From FreeIPA 4.0, after you install an IPA server/client, you get sudo
support from the very beginning, no additional configuration needed. All bells
and whistles will be included.

Martin