Hi Stefan, Am 07.11.2016 um 14:56 schrieb Stefan Maass <[email protected]>: > Thanks for your reply! > > I had seen the entry in the change log that you have mentioned below and I > have tried using the -g switch as well, but it did not change anything. It > just added one line into the output of the debug log other than that it does > nothing and I am still not allowed to sudo as I was in the former sudo > version. > > Nov 7 13:37:36 sudo[158099] will restore signal 13 on exec > Nov 7 13:37:36 sudo[158099] settings: runas_group=global_sysadmin > Nov 7 13:37:36 sudo[158099] settings: progname=sudo > Nov 7 13:37:36 sudo[158099] settings: > network_addrs=10.161.120.147/255.255.254.0 10.161.146.18/255.255.255.0 > 10.161.146.26/255.255.255.0 > Nov 7 13:37:36 sudo[158099] settings: plugin_dir=/opt/csw/libexec/sudo/ > Nov 7 13:37:36 sudo[158099] policy plugin returns 0 > > It looks like it does not find the policy in LDAP that matches the right to > switch user.
Maybe you can enable request logging on your LDAP server and see how the SEARCH request looks like? > The other changes that have been done in regards of LDAP don't say much to me > for now so I am not sure if they could be responsible for what I am facing. Apart from that I would expect an upstream issue as nothing has changed regarding the build perspective for OpenCSW. Best regards — Dago -- "You don't become great by trying to be great, you become great by wanting to do something, and then doing it so hard that you become great in the process." - xkcd #896
signature.asc
Description: Message signed with OpenPGP using GPGMail
