[Freeipa-users] SUDO with HostGroup and UserGroup not working

[Jakub Hrozek]

On Mon, Mar 23, 2015 at 06:26:21PM +0530, Yogesh Sharma wrote:
> Thanks Jakub.
> 
> All the issue seems to be resolved now except that getent is not able to
> resolve on IPA Server however working fine on other.
> 
> Below are the logs where it says it is not able to connect DataProvided.
> 

[ ...]

> *(Mon Mar 23 18:12:33 2015) [sssd[nss]] [lookup_netgr_dp_callback]
> (0x0040): Unable to get information from Data Provider*
> *Error: 3, 17, Netgroup lookup failed*
> *Will try to return what we have in cache*

The lines above ^^ tell me that the Data Provider couldn't retrieve the
netgroups from the server. You'd have to look into the domain logs to
see why..

> (Mon Mar 23 18:12:33 2015) [sssd[nss]] [lookup_netgr_step] (0x0100):
> Requesting info for [stg.initd.com at stg.initd.com]
> (Mon Mar 23 18:12:33 2015) [sssd[nss]] [lookup_netgr_step] (0x0040): No
> results for netgroup stg.initd.com (domain stg.initd.com)
> (Mon Mar 23 18:12:33 2015) [sssd[nss]] [lookup_netgr_step] (0x0080): No
> matching domain found for [stg.initd.com], fail!
> (Mon Mar 23 18:12:33 2015) [sssd[nss]] [sss_dp_req_destructor] (0x0400):
> Deleting request: [0xb77624d0:4:stg.initd.com at stg.initd.com]
> (Mon Mar 23 18:12:33 2015) [sssd[nss]] [client_recv] (0x0200): Client
> disconnected!