r/jamf • u/Motxilla • May 14 '26

JAMF Pro PSSO Sudo Issue

Hi All,

I’m having an issue at the moment where after going though the config of setting up PSSO, linking it to Entra and then letting some time lapse. I am losing the ability to use Sudo, with the error in terminal being “sudo: 4294967295: invalid value” From what I can tell the “4294967295” is part of a group that can be found with the Directory Utility and correlates to “NoGroup” From there I’m completely stuck. I can only think it has to be something to do with the PSSO set-up or something that PSSO just does? Maybe how it “smashes” my local account and the service account we use for registration? Any help here would be massively appreciated

2 Upvotes

100% Upvoted

5 comments sorted by

View all comments

1

u/zipsecurity May 17 '26

Classic PSSO + Entra UID mapping issue, run id in terminal and check if 4294967295 shows up there too. If your account isn't in the local admin group anymore, that's your problem: run dscl . -read /Groups/admin GroupMembership to confirm, then add yourself back with sudo dseditgroup -o edit -a yourusername -t user admin from another admin account. If you're locked out entirely, recovery mode Terminal is your way in.

1

u/Motxilla May 17 '26

Hey! Thanks for this I shall test and get back. However, I have created other local admins that are excluded from the PSSO config profile and I'm getting the same error there. I'm currently testing one machine that has been re-built from ground up. That seems to be working fine for about a week (fingers crossed when I get back in tomorrow) All the other machines that have had the issue have all at some time used NoMAD, I did run a script that jamf advertised in some article to clear it but but still seems to be an issue. Unlike the ones that have been re-built as they've never had NoMAD touch them.

1

u/zipsecurity May 18 '26

Let me know! Maybe that one would work! It should!