conf/138961: ldap groups don't work with su
>Number: 138961
>Category: conf
>Synopsis: ldap groups don't work with su
>Confidential: no
>Severity: non-critical
>Priority: medium
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Sat Sep 19 07:40:04 UTC 2009
>Closed-Date:
>Last-Modified:
>Originator: Gerhard Schmidt
>Release: FreeBSD 7.2-PRERELEASE amd64
>Organization:
Technische Universitaet Muenchen
>Environment:
System: FreeBSD helios.ze.tum.de 7.2-PRERELEASE FreeBSD 7.2-PRERELEASE #0: Wed Mar 25 08:20:23 CET 2009 root@helios.ze.tum.de:/usr/src/sys/amd64/compile/HELIOS amd64
>Description:
We have a ldap Server for Usermanagement and use nss_ldap and pam_ldap from the ports to
integrate the Userinformation into FreeBSD. Everything works quite well except for su to root
When i try to su to root i get su: sorry as if i didn't have the wheel group. id shows that i have the wheel group.
<------ Sat 19. Sep 2009 08:55:42 ------>
/usr/home/estartu
estartu@helios:1 -> su -
su: Sorry
<------ Sat 19. Sep 2009 08:56:02 ------>
/usr/home/estartu
estartu@helios:2 -> id
uid=1505(estartu) gid=1505(estartu) groups=1505(estartu),0(wheel),106(cvs)
It seems that the su command doesn't use the ldap groups.
>How-To-Repeat:
try su - with a setup where the wheel group comes from ldap
>Fix:
n/k
>Release-Note:
>Audit-Trail:
>Unformatted:
_______________________________________________
freebsd-bugs@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "freebsd-bugs-unsubscribe@freebsd.org"