3,523 reputation
1922
bio website
location
age
visits member for 5 years, 5 months
seen 16 hours ago

Dec
19
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
It is working now. I was messing around a lot with different switches to ipa-client-install (after doing an uninstall) and got my sssd.conf mixed up with another host I was also testing on. I think - but can't say for sure - that when I first reported this it was using the correct ldap_sasl_authid host but perhaps it wasn't. Anyway, I learned a lot in debugging this, thanks for your help.
Dec
19
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
I've added UPDATE 3 with the sssd_sudo.log output at debug_level = 8 (cuts out some noise). The sudo-debug.log produced 1500 lines of output, can you narrow it down to what to look for? Anyway, it looks like SSSD can't find any rules (i.e. my All rule). But why?
Dec
19
revised Using FreeIPA for centralized sudo - using SSSD for sudoers
added 4054 characters in body
Dec
19
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
Yes, nisdomainname is set. Again it all works if I am using "sudoers: files ldap" in /etc/nsswitch.conf
Dec
19
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
I am using CentOS/RHEL 6.5.
Dec
18
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
Thanks for your reply but I've seen that post.
Dec
12
revised Using FreeIPA for centralized sudo - using SSSD for sudoers
added 778 characters in body
Dec
11
revised Using FreeIPA for centralized sudo - using SSSD for sudoers
edited body
Dec
11
revised Using FreeIPA for centralized sudo - using SSSD for sudoers
added 607 characters in body
Dec
11
asked Using FreeIPA for centralized sudo - using SSSD for sudoers
Dec
10
comment Using FreeIPA for centralized sudo - how to specify ALL commands?
Agreed, I finished off the rule in the Web UI.
Dec
10
accepted Using FreeIPA for centralized sudo - how to specify ALL commands?
Dec
10
comment Using FreeIPA for centralized sudo - how to specify ALL commands?
The rule didn't exist by default and it took a little bit of work to get a rule that matched yours, i.e. "%admins ALL=(ALL) ALL" but I think I'm on the path of enlightenment now. Much appreciated, thanks!
Dec
9
asked Using FreeIPA for centralized sudo - how to specify ALL commands?
Dec
5
comment MySQL crash when I increase max_heap_table_size value
I (mostly) agree with yoonix. Instead of making these values HUGE you should move your tmpdir to tmpfs (RAM) and make these values as SMALL as possible (i.e. tmp_table-size=1K) so that the temp table goes into RAM as soon as possible.
Dec
2
answered How to configure Tomcat6 to run Php5
Nov
28
revised HP ProLiant DL380 G7 servers will not POST
edited title
Nov
18
answered mySQL 'Stop Slave' on Server Reboot
Nov
14
comment Apache Performance Tuning - Apache HTTP Server
Do you have primarily authenticated users or anonymous users?
Nov
11
comment Global Redirection of port 80 to 443
A proxy / local traffic manager.