[sudo-users] listpw/verifypw issues with sssd and ldap

Todd C. Miller Todd.Miller at courtesan.com
Sat Apr 9 19:59:46 MDT 2016


When you have multiple sudoers sources specified they are evaluated
separately.  This results in the inconsistency you see.  If you
only use "sudoers: ldap" or "sudoers: sss" things should work as
expected.  Sudo should really only skip the password requirement
if all sudoers sources allow it but that's not currently how it
behaves.

 - todd


More information about the sudo-users mailing list