<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <style type="text/css" style="display:none;"></style> </head> <body dir="ltr"> <div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;"> <p>Need help restoring central sudo rights on ipa server.</p> <p><br> </p> <p>How I broke it!!!: I decided to take advantage of the centralized automount feature with a custom location for a couple mounts. When I ran the ipa-client-automount --location=server_mounts it appeared to install correctly but that didn't appear not to work so my plan was to manually setup the automount since it is only one machine. So of course I ran the ipa-client-automount --uninstall on the ipa server and thats when I lost the sudo rights on the ipa server: superuser not in the sudoers file, this incident will be reported.</p> <p><br> </p> <p>I have repeated this steps with the same results:</p> <p>Initially sudo works for superuser</p> <p><span style="font-family: Calibri, Arial, Helvetica, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;">And after ipa-client-automount --location=server_mounts (on the ipa-server)</span></p> <p><span style="font-family: Calibri, Arial, Helvetica, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;">sudo still works</span></p> <p><span style="font-family: Calibri, Arial, Helvetica, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"><span style="font-family: Calibri, Arial, Helvetica, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;">but after, ipa-client-automount --uninstall</span><br> </span></p> <p>no sudo for superuser on the ipa server but the superuser still has sudo privilages on the clients????</p> <p><br> </p> <p>background/versions:</p> <p><span style="font-size: 12pt;">My setup is all CentOS 7.2 machines with one ipa server and the rest are clients all using ipa version </span><span style="font-size: 12pt;">4.2.0.</span><br> </p> <p><span style="font-size: 12pt;"></p> <p style="font-family: Calibri, Arial, Helvetica, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"> I had no issues using the ipa-client-automount on all my clients to configure network homes and shares as well as setting up a superuser with central sudo powers before this happened.</p> <p style="font-family: Calibri, Arial, Helvetica, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"> <br> </p> <p style="font-family: Calibri, Arial, Helvetica, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"> 1.) Don't be too harsh if it is a BIG NO-NO to run the ipa-client-automount command on the ipa-server</p> <p style="font-family: Calibri, Arial, Helvetica, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"> 2.) Not sure what logs or config files i need to post.</p> <p style="font-family: Calibri, Arial, Helvetica, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"> <br> </p> <p style="font-family: Calibri, Arial, Helvetica, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"> Thanks in advance!</p> <p style="font-family: Calibri, Arial, Helvetica, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 16px;"> -mark</p> <div><br> </div> </span> <p></p> <p><br> </p> <p> </p> <p><br> </p> </div> </body> </html>