<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 09/01/2014 06:17 PM, Rob Verduijn
wrote:<br>
</div>
<blockquote
cite="mid:CAMkGkc76huxL83FRfd8mKK9xZX6iC-n_K9y49CB37+DAkFSOHA@mail.gmail.com"
type="cite">
<div dir="ltr">Hello,
<div><br>
</div>
<div>I've a freeipa running on fedora 20 with fedora 20 clients.</div>
<div><br>
</div>
<div>When I configure sudo with the !authenticate option,
everything works fine.</div>
<div>ie 'sudo journalctl' works fine, you get to see the logs</div>
<div><br>
</div>
<div>However when I remove the !authenticate option the sudo
command asks for a password but it always fails.</div>
<div><br>
</div>
<div>In the logs it says that authentication succes</div>
<div>but it is followed by the line access denied.</div>
<div><br>
</div>
<div>What could be causing this ?</div>
<div><br>
</div>
<div>Rob</div>
<div><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
Probably access control. Do you have HBAC rules defined? Do they
allow user to do sudo operations?<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>