DavidP.24170 (Customer) asked a question.
I have a sudo entitlement problem I'm trying to troubleshoot. I've verified that the group I added to the project are non-admin, the sudo entitlement was added to their group but yet the user I'm testing with is still prompted for a password when trying to use sudo (I'm admin on this particular machine so can't test it myself). I setup a test machine in a different project (where I made myself non-admin) and used the same entitlement and it works just fine.
I know the entitlements get synced down to the server and I want to verify the entitlements are actually reaching the machine but I don't know what directory path they are stored in so I can get a physical verification they were synced properly.
Also if there's some logging of this activity available somewhere please point me to that too!
Can someone point me to what directory path in Linux the entitlements gets copied to and what file name(s) I should expect to be there if the entitlements were synced properly and what would be missing if the were not?
Hello @DavidP.24170 (Customer),
Please check the following link with information: https://support.okta.com/help/s/article/ASA-User-sudo-entitlements-in-files-on-a-directory?language=en_US
Regards,
Natalia
Okta Inc.
Hello @User16254393570754125507 (Okta) ,
I think you misunderstood my request. That link outlines the configuration of the SUDO entitlement, which I already know and have done.
What I am looking for is the directory location on the server that this configuration information gets written to. When a SUDO entitlement is created, it gets transferred somewhere on the server.
What directory path and filename(s) are the SUDO entitlement configuration in ASA written to on the server if I want to verify that the SUDO entitlement configuration information is actually getting written out to the server its assigned to?
Also, is there a log file somewhere I can look at that would have a log entry verifying it successfully received the entitlement information? (and where would that be located and what an example entry look like?)