Comment 3 for bug 423252

Revision history for this message
John Affleck (jraffleck) wrote : Re: NSS using LDAP on Karmic (alpha 4) breaks 'su' and 'sudo'

Apparently still present in RC. As a clarification, users present in /etc/passwd can still sudo just fine. Users present only via ldap cannot.

My suspicion is that the initial reporter had, as Scott G. suggested, the user present both via ldap and /etc/passwd, with the result that hitting the local file first (via compat) made it work, versus hitting ldap first makes it break.

passwd: files ldap
..does not work for me (with the user present only via ldap).
passwd: files compat ldap
..also does not work:
> sudo ls /tmp
sudo: setreuid(ROOT_UID, user_uid): Operation not permitted

Yuck.

Perhaps sudo/sudo-ldap are more appropriate packages ? It appears to be sudo-ldap 1.7.2-2 related (See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=545414)