[Freeipa-users] Sudo denied on first attempt, allowed on second attempt

Sumit Bose sbose at redhat.com
Mon Feb 24 17:38:08 UTC 2014


On Mon, Feb 24, 2014 at 10:46:19AM -0500, Pavel Brezina wrote:
> Hi,
> I wasn't able to reproduce with membership setup exactly like this. I 
> have already seen similar problem once, unfortunately the user stopped 
> responding before we could reach the root cause. I think it is correct 
> from the sudo point of view, what is problematic here is missing group 
> membership.
> 
> It seems that membership of trusted user is not resolved correctly. 
> Sumit, Jakub, do you have any ideas?
> 
> On 02/19/2014 03:27 PM, Steve Dainard wrote:

...

> >
> >                  sssd: 1.11.1
> >

Do you have a chance to update at least to 1.11.3? 1.11.4 would be even
better. There were couple of improvements and fixes to AD group handling
in 1.11.2 and 1.11.3.

bye,
Sumit




More information about the Freeipa-users mailing list