Restituisci
-
Titolo
VGP sudo plugin is not applying -
Descrizione
The sudo part for several GPOs aren't applying. Other parts of their GPO are applying correctly, there doesn't seem to be a replication issue.
This error message is showing in vgp apply debug for the GPOs that are having the issue:
ERROR: Caught exception in CSE vgp_accumulate_settings(), Unable to run authentication service search in AdObjectResolverCaused By:Lookup type not supported.ERROR: Setting accumulation of CSE vgp_sudoext.soError was 1: Operation not permitted -
Causa
The keytab for authentication across a one way trust had an invalid password and needed updating. This broken trust was causing the VGP sudo plugin to fail when trying to resolve groups in their sudoers file. -
Risoluzione
They created a new keytab for their trust and this resolved the issue.