<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 08/25/2014 12:01 PM, alireza baghery
wrote:<br>
</div>
<blockquote
cite="mid:CAPyvVhxR2d1q26qp4-OS3WEWp_AZXeq1BRmB-gMN+7U0zKw2zg@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>
<div>
<div>
<div>
<div>hi<br>
</div>
i integrated AD windows 208 R2 with IPA server (centos
6.5)<br>
</div>
i write a sudo policy and access for specified user and
host with allow any command.<br>
</div>
user can execute sudo in centos 7 but when user loggin on
centos 6.5 can not execute sudo and get error below<br>
</div>
user@AD is not in sudoers file.<br>
</div>
i configure /etc/nsswitch.conf --sudoers: file sss<br>
</div>
<div>/etc/sss/sss.conf----service nss, pam,ssh,sudo<br>
</div>
<div>/etc/sysconfig/network ----- NISDOMAIN=<a
moz-do-not-send="true" href="http://ad.com">ad.com</a><br>
</div>
<div><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
AFAIR there was a bug in 6.5 around sudo and AD users, it has been
fixed in fedora but I am not sure it made its way into all distros
yet.<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>