[Freeipa-users] sudo !requiretty !authenticate

[Craig White]

> That '(root) ALL' rule doesn't come from /etc/sudoers as I thought because nsswitch.conf presently only uses sss for sudoers. I still don't see where it actually comes from though...

What groups is rundeck a member of?
-----
Bingo!

Thanks Pavel/Rob

Turns out that I had long forgotten that I added rundeck user to sysadmin group for HBAC reasons, inherited the sudo rules for that group which were killing me.

Rundeck now workee!