[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd

[maxadamo]

bug still present in Maverick 10.10

this is the output with debug option enabled:

$ sudo -u news /usr/sbin/fetchnews
LDAP Config Summary
===================
uri              ldap://127.0.0.1/
ldap_version     3
sudoers_base     ou=sudoers,dc=homelinux,dc=doma
binddn           (anonymous)
bindpw           (anonymous)
timelimit        30
ssl              (no)
===================
sudo: ldap_initialize(ld, ldap://127.0.0.1/)
sudo: ldap_set_option: debug -> 0
sudo: ldap_set_option: ldap_version -> 3
sudo: ldap_set_option: timelimit -> 30
sudo: ldap_sasl_bind_s() ok
sudo: found:cn=defaults,ou=sudoers,dc=homelinux,dc=doma
sudo: ldap sudoOption: 'timestamp_timeout=30'
sudo: ldap sudoOption: 'env_reset'
sudo: setuid(): Operation not permitted

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in ubuntu.
https://bugs.launchpad.net/bugs/423252

Title:
  NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2
  suexec, and atd