Solaris 10, AD authentication and sudo (excessive) AD group lookups
Jeff Martin <[email protected]>
| Newsgroups | gmane.comp.tools.sudo.user |
|---|---|
| Message-ID | <[email protected]> |
Hello, TLDR: User belonging to many > 150 AD Groups, may not allow sudo to see the group so lookup of %GROUP in sudoers fails with permission not allowed if group not in first 32 lookups. Solaris 10 SPARC Sudo 1.8.23 Compiled on system default options Powerbroker Open AD authentication User belongs to 166 AD groups. Powerbroker sees 166 AD group memberships. Sudo sees 32 groups based on turning on sudo debug mode and checking the logs for # occurrences of "user is a member of ...." Issued a 'sudo -l -U' username which provided data for logs. Is this a known issue? Is there possibly a workaround? Let me know if more data is needed. Thanks in advance. Jeff ____________________________________________________________ sudo-users mailing list <[email protected]> For list information, options, or to unsubscribe, visit: https://www.sudo.ws/mailman/listinfo/sudo-users