libgcrypt

  1. Bug #423252
  2. Comment #83

Comment 83 for bug 423252

Revision history for this message
Ian Gordon (ian-gordon+launchpad) wrote : Re: NSS using LDAP+SSL breaks setuid applications like su and sudo

This bug also affects new installations.

Installing nscd does not fully fix the problem as it leaves su unable to su from an ldap user to another ldap user and a local user unable to su to an ldap user. Error is "setgid: Operation not permitted"

libpam-ldapd/libnss-ldapd does not support all the features that libpam-ldap/libnss-ldap does. Primarily all the pam_* configuration options are not supported leaving you unable to support limiting authentication to subsets of user on subsets of computers.