Public bug reported:

Binary package hint: sudo

Version: Ubuntu Server 7.04

I amm currently using pam_ldap for authentication.
I've created groups on the openldap server which mirrors those in the 
/etc/group system file. I intend to *augment* the system group memberships with 
those found in ldap. This is currently working for file permissions. This 
however does not work when I run sudo or su. 

>From the /etc/group file:

admin:x:111:administrator

>From ldap:

cn=admin
gidNumber=111
memberUid=Nathanael
objectClass=posixGroup
objectClass=top

As I mentioned above, as far as file access is concerned Nathanael and
administrator are both members of the admin group. When I run sudo as
Nathanael I get:

Nathanael is not in the sudoers file.  This incident will be reported.

If I change /etc/group to

admin:x:111:administrator,Nathanael

Then sudo works. I can live with changing the /etc/group file, but when
managing multiple servers it would be nice if I could simply update the
ldap side of things.

Nathanael

** Affects: sudo (Ubuntu)
     Importance: Undecided
         Status: New

-- 
sudo fails to authenticate user with pam_ldap based group
https://bugs.launchpad.net/bugs/134303
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to