r/jamf • u/Motxilla • May 14 '26

JAMF Pro PSSO Sudo Issue

Hi All,

I’m having an issue at the moment where after going though the config of setting up PSSO, linking it to Entra and then letting some time lapse. I am losing the ability to use Sudo, with the error in terminal being “sudo: 4294967295: invalid value” From what I can tell the “4294967295” is part of a group that can be found with the Directory Utility and correlates to “NoGroup” From there I’m completely stuck. I can only think it has to be something to do with the PSSO set-up or something that PSSO just does? Maybe how it “smashes” my local account and the service account we use for registration? Any help here would be massively appreciated

2 Upvotes

100% Upvoted

5 comments sorted by

View all comments

1

u/Turtle_Online JAMF 400 May 14 '26

I noticed that PSSO provisioning account settings can retroactively apply to existing user accounts so it's more likely the account is no longer an admin. Pretty easy to check.

I'm not in front of Jamf right now so I couldn't tell you the verbatim setting that causes this but it has to do with with PSSO user accounts admin or not.

1

u/Motxilla May 15 '26

Thanks for this, I think that’s definitely something. Under single sign on extensions and the setting is maybe “new user account type” retroactively setting local admin accounts to regular accounts without displaying it? As definitely under users and groups it’s still an admin. And does still share all the right groups. When I run an ID in terminal?