On (08/12/17 12:32), Pavel Březina wrote:
Hi, I quickly read through this thread.
The sudorule that you are using (below) does not have sudoCommand attribute specified. If you want to allow all commands, you still must set sudoCommand: ALL. If you want to allow only the command from the first mail, you must set it as well.
# SystemAdmin, sudoers, MYDOMAIN.COM dn: cn=SystemAdmin,ou=sudoers,dc=MYDOMAIN,dc=COM cn: SystemAdmin sudoRunAsUser: ALL sudoRunAsGroup: ALL sudoHost: ALL sudoUser: %SystemAdmin sudoOrder: 0 objectClass: sudoRole
Pavel,
Could you update update sudo troubleshooting guide?
LS