[Pkg-freeipa-devel] Bug#1129530: freeipa-client: Unable to run sudo as root after installing freeipa-client

[Shane Frasier]

Package: freeipa-client
Version: 4.13.1-1
Severity: normal
X-Debbugs-Cc: maverick at maverickdolphin.com

Dear Maintainer,

Before installing freeipa-client I can run, e.g., sudo ls as root
successfully.  After installing freeipa-client I get an error message
stating that root is not in the sudoers file, but if I look at the
contents of /etc/sudoers root is listed there as it always has been.
If I then run apt remove freeipa-client && apt autoremove then I can
again successfully run sudo commands as root.

1. If I start from the debian:forky Docker container and run apt update
&& apt install sudo then I can run sudo ls just fine.
2. Run apt install freeipa-client.
3. Now running, e.g., sudo ls fails because "root is not in the
sudoers file."
4. Run apt remove freeipa-client && apt autoremove.
5. I can again run sudo ls with no issues.

Thank you,
Shane Frasier

-- System Information:
Debian Release: forky/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 6.18.13-arch1-1 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: unable to detect

Versions of packages freeipa-client depends on:
ii  bind9-dnsutils               1:9.20.20-1
ii  bind9-utils                  1:9.20.20-1
ii  certmonger                   0.79.21-1
ii  curl                         8.18.0-2
ii  freeipa-common               4.13.1-1
ii  krb5-user                    1.22.1-2
ii  libc6                        2.42-13
ii  libcom-err2                  1.47.2-3+b8
ii  libcurl4t64                  8.18.0-2
ii  libini-config5t64            0.6.2-3+b1
ii  libjansson4                  2.14-2+b4
ii  libk5crypto3                 1.22.1-2
ii  libkrb5-3                    1.22.1-2
ii  libldap2                     2.6.10+dfsg-1+b1
ii  libnss-sss                   2.12.0-2
ii  libnss3-tools                2:3.120-1
ii  libpam-sss                   2.12.0-2
ii  libpopt0                     1.19+dfsg-2+b1
ii  libsasl2-modules-gssapi-mit  2.1.28+dfsg1-10
ii  libssl3t64                   3.5.5-1
ii  libsss-sudo                  2.12.0-2
ii  oddjob-mkhomedir             0.34.7-2.1+b1
ii  python3                      3.13.9-3
ii  python3-dnspython            2.7.0-1
ii  python3-gssapi               1.10.1-1+b1
ii  python3-ipaclient            4.13.1-1
ii  python3-ldap                 3.4.5-1
ii  python3-sss                  2.12.0-2
ii  sssd                         2.12.0-2

Versions of packages freeipa-client recommends:
ii  chrony        4.8-3
ii  sssd-passkey  2.12.0-2

Versions of packages freeipa-client suggests:
pn  libnss-myhostname  <none>
pn  libpam-krb5        <none>

-- no debconf information