payload: {"action":"opened","issue":{"url":"https://api.github.com/repos/BeyondTrust/pbis-open/issues/239","repository_url":"https://api.github.com/repos/BeyondTrust/pbis-open","labels_url":"https://api.github.com/repos/BeyondTrust/pbis-open/issues/239/labels{/name}","comments_url":"https://api.github.com/repos/BeyondTrust/pbis-open/issues/239/comments","events_url":"https://api.github.com/repos/BeyondTrust/pbis-open/issues/239/events","html_url":"https://github.com/BeyondTrust/pbis-open/issues/239","id":494281799,"node_id":"MDU6SXNzdWU0OTQyODE3OTk=","number":239,"title":"Admin Rights for Domain Admins","user":{"login":"Arindrew","id":8422128,"node_id":"MDQ6VXNlcjg0MjIxMjg=","avatar_url":"https://avatars1.githubusercontent.com/u/8422128?v=4","gravatar_id":"","url":"https://api.github.com/users/Arindrew","html_url":"https://github.com/Arindrew","followers_url":"https://api.github.com/users/Arindrew/followers","following_url":"https://api.github.com/users/Arindrew/following{/other_user}","gists_url":"https://api.github.com/users/Arindrew/gists{/gist_id}","starred_url":"https://api.github.com/users/Arindrew/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Arindrew/subscriptions","organizations_url":"https://api.github.com/users/Arindrew/orgs","repos_url":"https://api.github.com/users/Arindrew/repos","events_url":"https://api.github.com/users/Arindrew/events{/privacy}","received_events_url":"https://api.github.com/users/Arindrew/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2019-09-16T21:17:18Z","updated_at":"2019-09-16T21:17:18Z","closed_at":null,"author_association":"NONE","body":"**Version**: 9.0.2\r\n**OS/Distro**: Ubuntu Server 18.04 - no GUI\r\n**Issue/Impact**: Domain Admins do not have sudo rights\r\n```\r\nlwsmd.service is running\r\n```\r\n```\r\nlwreg            running (container: 1080)\r\ndcerpc          stopped\r\neventlog       running (container: 1185)\r\nlsass             running (container: 1291)\r\nlwio              running (container: 1272)\r\nnetlogon      running (container: 1215)\r\nrdr                running (io: 1272)\r\nreapsysl        running (container: 1330)\r\nusermonitor stopped\r\n```\r\n```\r\nName= adtest-andrew\r\nDomain = FSUPPORT.COM\r\nDistinguished Name = CN=ADTEST-ANDREW,CN=COMPUTERS,DC=fsupport,DC=com\r\n```\r\n```\r\nLSA Server Status:\r\n\r\nCompiled daemon version: 9.0.2.534\r\nPackaged product version: 9.0.534.497\r\nUptime:        0 days 0 hours 34 minutes 31 seconds\r\n\r\n[Authentication provider: lsa-activedirectory-provider]\r\n\r\n        Status:        Online\r\n        Mode:          Un-provisioned\r\n        Domain:        FSUPPORT.COM\r\n        Domain SID:    S-1-5-21-3517391977-2423012168-2185482087\r\n        Forest:        fsupport.com\r\n        Site:          US\r\n        Online check interval:  300 seconds\r\n        [Trusted Domains: 1]\r\n\r\n\r\n        [Domain: FSUPPORT]\r\n\r\n                DNS Domain:       fsupport.com\r\n                Netbios name:     FSUPPORT\r\n                Forest name:      fsupport.com\r\n                Trustee DNS name:\r\n                Client site name: US\r\n                Domain SID:       S-1-5-21-3517391977-2423012168-2185482087\r\n                Domain GUID:      4ab1aa19-ef4a-9a40-bc36-71c6da363279\r\n                Trust Flags:      [0x001d]\r\n                                  [0x0001 - In forest]\r\n                                  [0x0004 - Tree root]\r\n                                  [0x0008 - Primary]\r\n                                  [0x0010 - Native]\r\n                Trust type:       Up Level\r\n                Trust Attributes: [0x0000]\r\n                Trust Direction:  Primary Domain\r\n                Trust Mode:       In my forest Trust (MFT)\r\n                Domain flags:     [0x0001]\r\n                                  [0x0001 - Primary]\r\n\r\n                [Domain Controller (DC) Information]\r\n\r\n                        DC Name:              usdcfs.fsupport.com\r\n                        DC Address:           10.35.1.8\r\n                        DC Site:              US\r\n                        DC Flags:             [0x0000f1fc]\r\n                        DC Is PDC:            no\r\n                        DC is time server:    yes\r\n                        DC has writeable DS:  yes\r\n                        DC is Global Catalog: yes\r\n                        DC is running KDC:    yes\r\n\r\n                [Global Catalog (GC) Information]\r\n\r\n                        GC Name:              usdcfs.fsupport.com\r\n                        GC Address:           10.35.1.8\r\n                        GC Site:              US\r\n                        GC Flags:             [0x0000f1fc]\r\n                        GC Is PDC:            no\r\n                        GC is time server:    yes\r\n                        GC has writeable DS:  yes\r\n                        GC is running KDC:    yes\r\n```\r\n```\r\nUser info (Level-0):\r\n====================\r\nName:              andrew.adm\r\nUid:               711984722\r\nGid:               711983617\r\nGecos:             Andrew (Admin)\r\nShell:             /bin/bash\r\nHome dir:          /home/local/FSUPPORT/andrew.adm\r\n```\r\n- /opt/pbis/bin/lwsm set-log-target -p lsass -  file /tmp/lsass.log\r\n`20190916210212:ALWAYS: Logging started`\r\n\r\n- /opt/pbis/bin/lwsm set\r\n`Error: ERROR_INVALID_PARAMETER (87)`\r\n`Invalid parameter passed`\r\n\r\nI've added the domain account to the admin group in the /etc/group file by entering the following line:\r\nadmin:x:115:FSUPPORT\\andrew.adm\r\nand by adding the domain^admins group to the sudoers file with the following line:\r\n%fsupport.com\\\\domain^admins ALL=(ALL) ALL\r\n\r\nI have verified the account is in the Domain Admins group, but I cannot get sudo privileges to work."}}
other: {"actor":{"display_login":"Arindrew"}}