Enable sssd_sudo support #1856

Closed
guilhem opened this Issue Mar 8, 2017 · 4 comments

Comments

Projects
None yet
3 participants
@guilhem

guilhem commented Mar 8, 2017

Issue Report

Today it's not possible to add sudo rights based on ldap with sssd

(Wed Mar  8 15:06:56 2017) [sssd] [service_startup_handler] (0x0010): Could not exec /usr/libexec/sssd/sssd_sudo --uid 0 --gid 0 -d 0xf7f0 --debug-to-stderr, reason: No such file or directory

Feature Request

Environment

Container Linux run on baremetal

Desired Feature

Install sssd_sudo component.

@guilhem guilhem referenced this issue in coreos/coreos-overlay Mar 8, 2017

Merged

profiles/coreos: Turn on sudo support in sssd #2467

@dm0-

This comment has been minimized.

Show comment
Hide comment
@dm0-

dm0- Mar 8, 2017

Member

Merged, thanks.

Member

dm0- commented Mar 8, 2017

Merged, thanks.

@dm0- dm0- closed this Mar 8, 2017

@glevand

This comment has been minimized.

Show comment
Hide comment
@glevand

glevand Apr 30, 2018

@dm0- It seems we still don't have all the pieces for this to work. See: https://groups.google.com/forum/#!topic/coreos-user/YAtP4z7Eo6g

Can you add "--with-sssd" flag to build sudo in new versions?

I did a test build of sudo with '--with-sssd', and it built OK. I guess we would need to move app-admin/sudo to coreos-overlay and add our own with-sssd use flag.

glevand commented Apr 30, 2018

@dm0- It seems we still don't have all the pieces for this to work. See: https://groups.google.com/forum/#!topic/coreos-user/YAtP4z7Eo6g

Can you add "--with-sssd" flag to build sudo in new versions?

I did a test build of sudo with '--with-sssd', and it built OK. I guess we would need to move app-admin/sudo to coreos-overlay and add our own with-sssd use flag.

@dm0-

This comment has been minimized.

Show comment
Hide comment
@dm0-

dm0- May 1, 2018

Member

This is something that makes sense to send to Gentoo. I'll send a PR and see what they say, but yes, we can add it in the overlay to get it in the next release.

Member

dm0- commented May 1, 2018

This is something that makes sense to send to Gentoo. I'll send a PR and see what they say, but yes, we can add it in the overlay to get it in the next release.

@dm0-

This comment has been minimized.

Show comment
Hide comment
@dm0-

dm0- May 1, 2018

Member

I've opened gentoo/gentoo#8230. If that is merged this week, we can just sync portage-stable instead of moving to the overlay.

Member

dm0- commented May 1, 2018

I've opened gentoo/gentoo#8230. If that is merged this week, we can just sync portage-stable instead of moving to the overlay.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment