SSSD / sssd

#2892 sssd does not retrieve sudo rules of local users whose sudo rules stored in ldap server
Closed: Duplicate Opened by mowntan.

Closed: Duplicate
Reopen Issue

Description of problem:

  • In RHEL 6.5 configured as ldap-client using sssd, there are some local users

whose sudo rules are stored/defined on LDAP server. sssd is not fetching those
sudo rules from ldap server if the users are local to system.

Steps to Reproduce:
1. configure rhel6 as ldap client, and also configure it to fetch sudo rules
from ldap server
2. create local users on rhel6 and add define their sudo rules on ldap server.
3. Try to fetch these sudo rules from rhel6 client.

Actual results:

local user is not able to run the sudo rules:
]# sudo -l -U testuser
User testuser is not allowed to run sudo on localsystem

Expected results:
Local user should be able to run the sudo rules.

This is not going to work easily until we have a full local provider support. You can try the proxy provider as a workaround in the meantime. Define a domain like this:

[dom/proxy]
id_provider=proxy
sudo_provider=ldap
ldap_uri = ldap://my.server.test
ldap_sudo_search_base = dc=server,dc=test
...

You should be able to use this domain in conjuction with the existing domains, ie:

domains = mycorp, proxy

This is a duplicate of #2494.

resolution: => duplicate
status: new => closed

Metadata Update from @mowntan:
- Issue set to the milestone: NEEDS_TRIAGE

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/3933

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
None
Normal
defect
SSSD
0
0
0
None
0
0
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.