<div dir="ltr">I would check for DNS resolution from the machine executing the sudo, to the IPA server. </div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jun 4, 2015 at 9:54 AM, Sina Owolabi <span dir="ltr"><<a href="mailto:notify.sina@gmail.com" target="_blank">notify.sina@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi<br>
<br>
I recently had to remove and reinstall a fresh IPA server. I am<br>
currently re-enrolling all the ipa clients to the recently refreshed<br>
domain (same name as the previous realm and domain). The new IPA<br>
master is RHEL7.1 with IPA 4.1.3.<br>
<br>
All client servers are running RHEL6.6.<br>
<br>
I also have sudorule that allows a group to have access to run all<br>
commands on all servers:<br>
<br>
Rule name: All<br>
Enabled: TRUE<br>
Host category: all<br>
Command category: all<br>
User Groups: superusers<br>
Sudo Option: !authenticate<br>
----------------------------<br>
<br>
I noticed that trying to run sudo on a few of the servers makes the<br>
command hang indefinitely.<br>
I am not sure what is the cause and where to look. Please what can I<br>
do to troubleshoot and fix this?<br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
Manage your subscription for the Freeipa-users mailing list:<br>
<a href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br>
Go to <a href="http://freeipa.org" target="_blank">http://freeipa.org</a> for more info on the project<br>
</font></span></blockquote></div><br></div>