Thank you Geoff! Sorry for delay, I opened it https://github.com/coreos/bugs/issues/2423
On Monday, 30 April 2018 20:14:00 UTC+3, Geoff Levand wrote: > > On 04/18/2018 09:13 AM, Geoff Levand wrote: > > On 04/18/2018 04:38 AM, Sergei Diachenko wrote: > >> I use FreeIPA in my network and want to connect CoreOS with it. I > configured kerberos and sssd to use my FreeIPA server, so FreeIPA users can > be authenticated in CoreOS. But FreeIPA sudo rules don't apply to CoreOS. > The reason is sudo which is built without sssd support (I checked configure > options via "sudo -V" command). > >> > >> Can you add "--with-sssd" flag to build sudo in new versions? > > > > I checked, and sssd is build with sudo support: > > > > equery-amd64-usr -q u sys-auth/sssd | egrep sudo > > +sudo > > > > And I did a test build of sudo with '--with-sssd', and it built OK. > > > > Please open a feature request in the CoreOS bug tracking: > > > > https://github.com/coreos/bugs > > Just to follow up, there is an existing bug report and patch > for using sudo with sssd, but it did not include the --with-sssd > build option for the sudo program. I added a comment regarding > this. > > See: https://github.com/coreos/bugs/issues/1856 > > -Geoff >
