Comment 26 for bug 423252

Revision history for this message
Neile Havens (neile-havens) wrote : Re: NSS using LDAP on Karmic breaks 'su' and 'sudo'

NOTE: This is a regression (or design change) from Jaunty.

Installing nscd gets rid of this error message when trying to sudo as an ldap user
sudo: setreuid(ROOT_UID, user_uid): Operation not permitted

With nscd installed and ldaps and ssl on, I can sudo as an ldap user. In addition, I can su from an ldap user to a local user. However, I cannot su from a local user to an ldap user.
nhavens@cslab04:/homes.all/linux/nhavens$ su ladmin
Password:
ladmin@cslab04:/homes.all/linux/nhavens$ su nhavens
Password:
setgid: Operation not permitted
ladmin@cslab04:/homes.all/linux/nhavens$

In /etc/ldap.conf, with the following combination, I still get "Operation not permitted"
ldaps://**********
ssl off

The "Operation not permitted" error, when suing from local to ldap users only goes away when I change ldaps://***** to ldap://******