[SOLVED] Sudo is not working on my centos7.3

pan64 · 08-21-2017, 03:40 AM

If there was no other way I would temporarily remove everything from that sudoers file (I mean all the lines) and keep the only one you need to test the user.

xq10907 · 08-21-2017, 04:59 AM

Quote:

Originally Posted by pan64

If there was no other way I would temporarily remove everything from that sudoers file (I mean all the lines) and keep the only one you need to test the user.

figured out,sudo only has ldap in name service setting, see following

Code:

[root@ark-centos-smb4 /]# grep sudo /etc/nsswitch.conf
sudoers:        ldap

since i have sssd configued so change to following to let sudo working for local users,domain users

[root@ark-centos-smb4 ~]# grep sudo /etc/nsswitch.conf

Code:

#sudoers:       ldap
sudoers:    files sss ldap

pan64 · 08-21-2017, 05:41 AM

great!
If your problem is solved please mark the thread solved.

xq10907 · 08-21-2017, 08:37 PM

Quote:

Originally Posted by MensaWater

visudo will check syntax but doesn't check SELinux status. Did you check whether you have that enabled and enforcing? If it is did you check the SELinux context of /etc/sudoers?

Also did you verify permissions of /etc itself and /etc/sudoers?

If you look in /var/log/secure does it show any more detail about the failure?

Quote:

Originally Posted by pan64

great!
If your problem is solved please mark the thread solved.

Done,thanks for the help guys

MensaWater · 08-22-2017, 12:06 PM

Quote:

Originally Posted by xq10907

figured out,sudo only has ldap in name service setting, see following

Code:

[root@ark-centos-smb4 /]# grep sudo /etc/nsswitch.conf
sudoers:        ldap

since i have sssd configued so change to following to let sudo working for local users,domain users

[root@ark-centos-smb4 ~]# grep sudo /etc/nsswitch.conf

Code:

#sudoers:       ldap
sudoers:    files sss ldap

Nice. Until this post I didn't realize nsswitch.conf had a line for sudoers.