<div dir="ltr">Thanks. It's good to know that it is fixed upstream. For discussion though, are any enhancements planned for dealing with installation/removal of ipa ? </div><div class="gmail_extra"> <div class="gmail_quote">On Wed, Jun 24, 2015 at 12:49 AM, Jakub Hrozek <<a href="mailto:jhrozek@redhat.com" target="_blank">jhrozek@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Tue, Jun 23, 2015 at 10:46:14PM -0700, Prasun Gera wrote: > After spending a better part of the day, the culprit was this line in > nsswitch.conf: > > sudoers: files sss sss Known ipa-client-install bug, fixed. > > It turns out that the extra sss left behind is sufficient to make any sudo > command hang. Easy to reproduce too. Known sudo bug, fixed in upstream and making its way into downstreams: <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1133657" rel="noreferrer" target="_blank">https://bugzilla.redhat.com/show_bug.cgi?id=1133657</a> <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1147498" rel="noreferrer" target="_blank">https://bugzilla.redhat.com/show_bug.cgi?id=1147498</a> -- Manage your subscription for the Freeipa-users mailing list: <a href="https://www.redhat.com/mailman/listinfo/freeipa-users" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a> Go to <a href="http://freeipa.org" rel="noreferrer" target="_blank">http://freeipa.org</a> for more info on the project </blockquote></div> </div>