Re: Sudo with SSSD !requiretty being ignored
"Miller, Vincent \(Rick\) via sudo-users" <[email protected]>
| Newsgroups | gmane.comp.tools.sudo.user |
|---|---|
| Message-ID | <[email protected]> |
On 8/3/18, 5:10 AM, "sudo-users on behalf of Paul Cantle" <[email protected] on behalf of [email protected]> wrote: Hi Todd, I must apologise for wasting your time. I think the issue was relating to SSSD caching. This morning I put requiretty back in the defaults container restarted SSSD across 2 machines (a few times). Then initiated a ssh <machine> sudo ls / and it worked fine. I removed !requiretty from the container containing my user and it gave me the "sudo: sorry, you must have a tty to run sudo" msg. Hi Paul, This behavior does indeed sound much like SSSD caching. SSSD caches sudo rules. Deleting the cache after stopping, before restarting removes it forcing a refresh. Unfortunately, SSSD doesn't include a command line mechanism to clear cache; It must be manually deleted. On FreeBSD, it's location is /var/db/sss/. I believe Linux (particularly RedHat) may store it at /var/lib/sss/db/. ____________________________________________________________ sudo-users mailing list <[email protected]> For list information, options, or to unsubscribe, visit: https://www.sudo.ws/mailman/listinfo/sudo-users