[Freeipa-users] Freeipa and sudo

[Jakub Hrozek]

On Wed, Jul 06, 2016 at 03:22:34PM +0200, Tomas Simecek wrote:
> Hi Danila and other freeipa gurus,
> sorry for my late answer, there is a bank holiday in CZ and I am off work
> these two days.
> Yes, /etc/nsswitch.conf is fine, see:
> 
> [root at spcss-2t-www ~]# cat /etc/nsswitch.conf |grep sudo
> sudoers: files sss
> 
> I think it is set up as part of freeipa-client package.
> I went through this guide:
> https://fedorahosted.org/sssd/wiki/HOWTO_Troubleshoot_SUDO

We also need to see sssd_sudo.log and the log from the sudo itself
(configured in /etc/sudo.conf)