freeipa

Clone
Source Code
GIT

#4508 Installing ipa-client on a machine that had sss in nsswitch's sudoers breaks sudo
Closed: Fixed None Opened 9 years ago by jhrozek.

Closed: Fixed
Reopen Issue

I had a machine previously configured for SSSD's sudo integration that had the following settings in nsswitch.conf

sudoers: files sss

Turning this machine into an IPA client using ipa-client-install added yet another sss entry to nsswitch.conf:

sudoers: files sss sss

This settings broke sudo. That'a separate issue, likely a sudo bug, but the configuration ipa-client-install produces is wrong as well.

FWIW, I filed the sudo issue as:
https://bugzilla.redhat.com/show_bug.cgi?id=1133657

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=924395 (Red Hat Enterprise Linux 7)

Starting review

master:

  • fd26560 ipa-client-install: Do not add already configured sources to nsswitch.conf entries

ipa-4-1:

  • 5aead1f ipa-client-install: Do not add already configured sources to nsswitch.conf entries

ipa-4-0:

  • 6bb6671 ipa-client-install: Do not add already configured sources to nsswitch.conf entries

Metadata Update from @jhrozek:
- Issue assigned to tbabej
- Issue set to the milestone: FreeIPA 4.0.2
7 years ago

Login to comment on this ticket.

Metadata
None
None
None
important
None
None
None
None
defect
None
None
Client
None
1
None
None
pviktori
None
https://bugzilla.redhat.com/show_bug.cgi?id=924395
None
None
None
Powered by Pagure 5.13.3
Documentation • File an Issue • About • SSH Hostkey/Fingerprint
© Red Hat, Inc. and others.