Hi Sergei, On 04/18/2018 04:38 AM, Sergei Diachenko wrote: > I use FreeIPA in my network and want to connect CoreOS with it. I configured > kerberos and sssd to use my FreeIPA server, so FreeIPA users can be > authenticated in CoreOS. But FreeIPA sudo rules don't apply to CoreOS. The > reason is sudo which is built without sssd support (I checked configure > options via "sudo -V" command). > > Can you add "--with-sssd" flag to build sudo in new versions?
I checked, and sssd is build with sudo support: equery-amd64-usr -q u sys-auth/sssd | egrep sudo +sudo And I did a test build of sudo with '--with-sssd', and it built OK. Please open a feature request in the CoreOS bug tracking: https://github.com/coreos/bugs -Geoff
