<div dir="ltr"><div>I can't reproduce consistently on any OS including Fedora 20, but I was able to trigger the issue on a Ubuntu 13.10 client.</div><div><br></div><div>sssd: 1.11.1</div><div><br></div><div>sudo: 1.8.6p3-0ubuntu3 </div>
<div><br></div><div>I have only just enabled the sudo logging so it should only contain the events below:</div><div><br></div><div><div>sdainard-admin@miovision.corp@ubu1310:~$ sudo su</div><div>[sudo] password for sdainard-admin@miovision.corp: </div>
<div>sdainard-admin@miovision.corp is not allowed to run sudo on ubu1310. This incident will be reported.</div><div>sdainard-admin@miovision.corp@ubu1310:~$ sudo su</div><div>[sudo] password for sdainard-admin@miovision.corp: </div>
<div>root@ubu1310:/home/miovision.corp/sdainard-admin# </div></div><div><br></div><div>Files attached outside of list.</div><div><br></div><div>Thanks,</div></div><div class="gmail_extra"><br clear="all"><div><div dir="ltr">
<span style="font-family:arial,sans-serif;font-size:16px"><strong>Steve Dainard </strong></span><span style="font-size:12px"></span><br>
<span style="font-family:arial,sans-serif;font-size:12px">IT Infrastructure Manager<br>
<a href="http://miovision.com/" target="_blank">Miovision</a> | <em>Rethink Traffic</em><br><br>
<strong style="font-family:arial,sans-serif;font-size:13px;color:#999999"><a href="http://miovision.com/blog" target="_blank">Blog</a> | </strong><font color="#999999" style="font-family:arial,sans-serif;font-size:13px"><strong><a href="https://www.linkedin.com/company/miovision-technologies" target="_blank">LinkedIn</a> | <a href="https://twitter.com/miovision" target="_blank">Twitter</a> | <a href="https://www.facebook.com/miovision" target="_blank">Facebook</a></strong></font> </span>
<hr style="font-family:arial,sans-serif;font-size:13px;color:#333333;clear:both">
<div style="color:#999999;font-family:arial,sans-serif;font-size:13px;padding-top:5px">
<span style="font-family:arial,sans-serif;font-size:12px">Miovision Technologies Inc. | 148 Manitou Drive, Suite 101, Kitchener, ON, Canada | N2C 1L3</span><br>
<span style="font-family:arial,sans-serif;font-size:12px">This e-mail may contain information that is privileged or confidential. If you are not the intended recipient, please delete the e-mail and any attachments and notify us immediately.</span></div>
</div></div>
<br><br><div class="gmail_quote">On Mon, Feb 17, 2014 at 3:46 AM, Pavel Březina <span dir="ltr"><<a href="mailto:pbrezina@redhat.com" target="_blank">pbrezina@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="">On 02/16/2014 01:19 AM, Steve Dainard wrote:<br>
</div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="">
Just experienced the same issue on Fedora 20:<br>
<br>
[sdainard-admin@miovision.corp<u></u>@fed20 ~]$ sudo systemctl stop firewalld<br>
[sudo] password for sdainard-admin@miovision.corp:<br>
sdainard-admin@miovision.corp is not allowed to run sudo on fed20. This<br>
incident will be reported.<br>
[sdainard-admin@miovision.corp<u></u>@fed20 ~]$ sudo systemctl stop firewalld<br>
[sudo] password for sdainard-admin@miovision.corp:<br>
[sdainard-admin@miovision.corp<u></u>@fed20 ~]$<br>
<br>
Sat Feb 15 19:10:30 2014 is the 2nd attempt in the logs (attached).<br>
<br>
/var/log/messages:<br>
Feb 15 19:10:31 fed20 systemd: Stopping firewalld - dynamic firewall<br>
daemon...<br>
Feb 15 19:10:31 fed20 systemd: Stopped firewalld - dynamic firewall daemon.<br>
<br>
<br>
<br></div>
*Steve Dainard *<br>
IT Infrastructure Manager<br>
Miovision <<a href="http://miovision.com/" target="_blank">http://miovision.com/</a>> | /Rethink Traffic/<br>
<br>
*Blog <<a href="http://miovision.com/blog" target="_blank">http://miovision.com/blog</a>> | **LinkedIn<br>
<<a href="https://www.linkedin.com/company/miovision-technologies" target="_blank">https://www.linkedin.com/<u></u>company/miovision-technologies</a><u></u>> | Twitter<br>
<<a href="https://twitter.com/miovision" target="_blank">https://twitter.com/miovision</a><u></u>> | Facebook<br>
<<a href="https://www.facebook.com/miovision" target="_blank">https://www.facebook.com/<u></u>miovision</a>>*<br>
------------------------------<u></u>------------------------------<u></u>------------<div class=""><br>
Miovision Technologies Inc. | 148 Manitou Drive, Suite 101, Kitchener,<br>
ON, Canada | N2C 1L3<br>
This e-mail may contain information that is privileged or confidential.<br>
If you are not the intended recipient, please delete the e-mail and any<br>
attachments and notify us immediately.<br>
<br>
<br>
On Fri, Feb 14, 2014 at 4:33 PM, Steve Dainard <<a href="mailto:sdainard@miovision.com" target="_blank">sdainard@miovision.com</a><br></div><div class="">
<mailto:<a href="mailto:sdainard@miovision.com" target="_blank">sdainard@miovision.com</a><u></u>>> wrote:<br>
<br>
On a Ubuntu 13.10 client after configuring sssd to provide sudo<br>
service I left the client idle for a few hours. On returning, I<br>
unlocked the screensaver and did the following:<br>
<br>
sdainard-admin@miovision.corp@<u></u>ubu1310:~$ sudo su<br>
[sudo] password for sdainard-admin@miovision.corp:<br>
sdainard-admin@miovision.corp is not allowed to run sudo on ubu1310.<br>
This incident will be reported.<br>
sdainard-admin@miovision.corp@<u></u>ubu1310:~$ sudo su<br>
[sudo] password for sdainard-admin@miovision.corp:<br>
root@ubu1310:/home/miovision.<u></u>corp/sdainard-admin#<br>
<br>
I haven't experienced this on a Fedora 20 or EL client so I'm<br>
guessing this is something specific to Ubuntu.<br>
<br>
I've attached the client sssd log if anyone can point me in the<br>
right direction.<br>
<br>
Thanks,<br>
<br>
<br></div>
*Steve Dainard *<br>
IT Infrastructure Manager<br>
Miovision <<a href="http://miovision.com/" target="_blank">http://miovision.com/</a>> | /Rethink Traffic/<br>
<br>
*Blog <<a href="http://miovision.com/blog" target="_blank">http://miovision.com/blog</a>> | **LinkedIn<br>
<<a href="https://www.linkedin.com/company/miovision-technologies" target="_blank">https://www.linkedin.com/<u></u>company/miovision-technologies</a><u></u>> | Twitter<br>
<<a href="https://twitter.com/miovision" target="_blank">https://twitter.com/miovision</a><u></u>> | Facebook<br>
<<a href="https://www.facebook.com/miovision" target="_blank">https://www.facebook.com/<u></u>miovision</a>>*<br>
------------------------------<u></u>------------------------------<u></u>------------<div class=""><br>
Miovision Technologies Inc. | 148 Manitou Drive, Suite 101,<br>
Kitchener, ON, Canada | N2C 1L3<br>
This e-mail may contain information that is privileged or<br>
confidential. If you are not the intended recipient, please delete<br>
the e-mail and any attachments and notify us immediately.<br>
</div></blockquote>
<br>
Hi,<br>
provided logs did not reveal anything bad. Can you also attach sssd_sudo.log, sssd_nss.log and sssd.conf please? Also what sssd and sudo version do you run?<br>
<br>
Is this always reproducible or it happens only sporadically?<br>
<br>
Thanks.<br>
</blockquote></div><br></div>