libgcrypt

  1. Bug #423252
  2. Comment #89

Comment 89 for bug 423252

Revision history for this message
Lawren Quigley-Jones (lawrenqj) wrote : Re: NSS using LDAP+SSL breaks setuid applications like su and sudo

My experience with libnss-ldap is that nscd allows sudo but not su. Also the GUI authentication doesn't work.

I just got around to testing libnss-ldapd and I can verify that both sudo and su work there.

Ubuntu's gui authentication process does not work though. When you try to perform a privileged action like adding a printer it opens the "Authentication" dialogue and asks for a password. When you enter an ldap password it returns "bad password" and the entire printer config system freezes. The following errors are from auth.log:

May 7 11:53:11 engine cupsd: pam_unix(cups:auth): check pass; user unknown
May 7 11:53:11 engine cupsd: pam_unix(cups:auth): authentication failure; logname= uid=0 euid=0 tty=cups ruser= rhost=localhost
May 7 11:53:11 engine cupsd: pam_unix(cups:account): could not identify user (from getpwnam(lquigley))