Bug#783889: sudo-ldap, libsss-sudo: need to coordinate modifications to /etc/nsswitch.conf

On Fri, May 01, 2015 at 02:09:20AM +0200, Andreas Beckmann wrote: > both sudo-ldap and libsss-sudo (and maybe some more packages?) modify > /etc/nsswitch.conf to (un-)register a sudoers: entry. Things have moved a bit since this was filed. As soon as sssd's https://salsa.debian.org/sssd-team/sssd/

Bug#783889: sudo-ldap, libsss-sudo: need to coordinate modifications to /etc/nsswitch.conf

To summarize from discussions on sudo@packages.d.o and elsewhere (e.g. #990855): * Sudo has IMO no business of putting an entry into /etc/nsswitch.conf since NSS is a mechanism for order-invariant entity resolution whereas sudo uses its plugins for combined entity resolution and policy rule

Bug#783889: sudo-ldap, libsss-sudo: need to coordinate modifications to /etc/nsswitch.conf

Package: sudo-ldap,libsss-sudo Severity: normal Hi, both sudo-ldap and libsss-sudo (and maybe some more packages?) modify /etc/nsswitch.conf to (un-)register a sudoers: entry. Right now that is happening in an uncoordinated way: sudo-ldap adds 'sudoers: files ldap' if no ^sudoers: is found and d