[sudo-users] Warning email when listing sudo perms

Todd C. Miller Todd.Miller at courtesan.com
Wed Dec 2 10:32:10 MST 2015


It looks like the LDAP and SSSD backends do not clear the user and
host match flags the same way the local sudoers file backend does,
which is a bug.

Do you happen to have the "mail_no_host" sudoOption enabled?
If so, try disabling it and see if the behavior changes.

You can get some debugging info by adding a line like the following
to /etc/sudo.conf:

Debug sudo /var/log/sudo_debug sssd at debug

One of the lines in /var/log/sudo_debug should look something like:

sudo_sss_lookup(45)=0xd2"

 - todd


More information about the sudo-users mailing list