[Freeipa-users] Ubuntu sssd client -- FreeIPA Server fed from AD

[Gonzalo Fernandez Ordas]

Exactly the document i was having a look at.
In simple words,is possible to work this around and how,?
Otherwise i have to drop freeipa and get back to 389_ds as still seems fully ldap sssd compatible.

Have you got any doc clearly stating how to get this done?
I really invested many days on reaching this far being  sudo the last tiny bit to get sorted which is hugely frustrated.

Thanks for all the support 
Sent from Type Mail



On Mar 25, 2015, 5:35 PM, at 5:35 PM, Dmitri Pal <dpal at redhat.com> wrote:
>On 03/25/2015 08:32 PM, g.fer.ordas at unicyber.co.uk wrote:
>> Hi
>>
>> I am setting up a plain and simple sssd service against my FreeIPA 
>> Server.
>> The FreeIPA Server is a Centos 7.1 box with IPA version 4.1 and the 
>> client box is ubuntu: Ubuntu 12.04.5 LTS
>>
>> The Users and Credentials are being Synched out of an AD Server (the 
>> passwords happened to be transferred using the PassSync Service)
>>
>> Now.. I wanted to setup a very simple sssd service (not the FreeIPA 
>> client service)
>> And so far I succeeded on synching the users along with the passwords
>
>> using SSSD.
>>
>> Now, Trying to get the sudo access sorted I cannot see that working, 
>> and I came across some documentation mentioning SSSD is NOT currently
>
>> supporting IPA schema for the SUDOers
>> if that is the case
>>
>> Can anybody point me to the right document or procedure in terms of 
>> getting also the sudoers installed?
>>
>> Would be possible , somehow, to have this sorted WITHOUT using the 
>> ipa-client?
>>
>> many thanks!
>>
>>
>http://www.freeipa.org/images/7/77/Freeipa30_SSSD_SUDO_Integration.pdf
>
>-- 
>Thank you,
>Dmitri Pal
>
>Sr. Engineering Manager IdM portfolio
>Red Hat, Inc.
>
>-- 
>Manage your subscription for the Freeipa-users mailing list:
>https://www.redhat.com/mailman/listinfo/freeipa-users
>Go to http://freeipa.org for more info on the project
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20150325/4d2fe192/attachment.htm>