[Freeipa-users] can't get sudo to work.

[Pavel Březina]

On 08/23/2016 01:55 PM, Tony Brian Albers wrote:
> Here you are:
>
>
> [root ~]# ldapsearch -Y GSSAPI -b $dc
> '(ou=*)' -s onelevel

> # profile, $domain
> dn: ou=profile,$dc
> objectClass: top
> objectClass: organizationalUnit
> ou: profiles
> ou: profile
>
> # search result
> search: 4
> result: 0 Success
>
> # numResponses: 2
> # numEntries: 1


Sudo rules are not downloaded by SSSD because ou=sudoers is missing on 
the IPA server, or it may have incorrect ACL. Does someone from IPA team 
know why?