"Chao Shin" <[email protected]> writes:
> "Lev Serebryakov" <[email protected]> writes:
> > But when "wheel" is in /etc/group with only "root" member (as all
> > other members are in LDAP), system never takes "wheel" members from
> > LDAP (because /etc/group has priority) and "su" doesn't work!
> I don't have system to test this now, but you can try below config in your
> nsswitch.conf
>
> group: files [success=return notfound=continue] ldap
> passwd: files [success=return notfound=continue] ldap

That won't make any difference, because "files" *will* succeed, since
there is a wheel entry in /etc/group.

(actually, I believe [success=return notfound=continue] is the default
behavior)

DES
-- 
Dag-Erling Smørgrav - [email protected]
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[email protected]"

Reply via email to