Comment 44 for bug 423252

Revision history for this message
Philipp Kaluza (pixelpapst) wrote : Re: NSS using LDAP on Karmic breaks 'su' and 'sudo'

@Andreas: wow, that explains a lot, especially why installing nscd seems to help.
Because if nscd is not running, the libnss_ldap function getpwnam() resolves to will run in process, and someone in there (libgnutls ?) does the priviledge drop.
Good catch, let's investigate further.