<html> <head> <meta content="text/html; charset=utf-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> libsss-sudo already installed. Here is my sssd.conf: [domain/ipa.grp] krb5_realm = IPA.GRP cache_credentials = True krb5_store_password_if_offline = True ipa_domain = ipa.grp id_provider = ipa auth_provider = ipa access_provider = ipa ipa_hostname = clnt.ipa.grp chpass_provider = ipa ipa_dyndns_update = True ipa_server = _srv_, srv.ipa.grp ldap_tls_cacert = /etc/ipa/ca.crt [sssd] services = nss, pam, ssh, sudo config_file_version = 2 domains = ipa.grp ldap_sudo_search_base = ou=sudoers,ou=ipa,dc=grp ldap_sasl_mech = GSSAPI ldap=sasl_authid = host/cnlt2.ipa.grp ldap_sasl_realm = IPA.GRP ldap_netgroup_search_base = ou=SUDOers,dc=ipa,dc=grp sudo_provider = ldap ldap_uri = <a class="moz-txt-link-freetext" href="ldap://srv.ipa.grp">ldap://srv.ipa.grp</a> krb5_server = srv.ipa.grp debulg_level = 6 [nss] homedir_substring = /home [pam] [sudo] debug_level = 6 [autofs] [ssh] [pac <div class="moz-cite-prefix">On 01-09-2014 10:12, Lukas Slebodnik wrote: </div> <blockquote cite="mid:20140901071217.GC8008@mail.corp.redhat.com" type="cite"> <pre wrap="">On (01/09/14 09:59), Tevfik Ceydeliler wrote: </pre> <blockquote type="cite"> <pre wrap=""> Client side: sssd --> 1.11.5 sudo --> 1.8.9p5-1ubuntu1 (sudo-ldap package conflicts) </pre> </blockquote> <pre wrap="">Thats good. The package sudo-ldap is not compiled with sssd support. </pre> <blockquote type="cite"> <pre wrap="">OS --> Ubuntu 14.04.1 LTS </pre> </blockquote> <pre wrap="">Do you have installed package libsss-sudo. Could you show us your sssd.conf file? BTW: Instructions for confugurations sudo with the SSSD back end are in man page sssd-sudo. LS </pre> </blockquote> <div class="moz-signature">-- <img src="cid:part1.02030703.01060409@astron.yasar.com.tr" border="0"></div> </body> </html> <table><tr><td bgcolor=#ffffff> <img src="http://www.yasar.com.tr/banner/yhbanner.jpg"> </img> Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz.The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system. </td></tr></table>