Date: Sun, 06 Sep 2009 20:50:54 -0400 >From: ben thielsen <b...@bitrate.net> >------------- >Body: Package: sudo-ldap >Version: 1.7.2-2 >Severity: important > >both sudo and sudo-ldap fail when a user in ldap attempts to use sudo (for example, sudo su). with the following message: > >sudo: setreuid(ROOT_UID, user_uid): Operation not permitted > >users in the traditional passwd database don't appear to be affected. > >this system uses ldap with both nss and pam. all other aspects related to ldap appear to be working (e.g. id, getent, etc.). i don't have a solution >to offer, as i was not able to successfully troubleshoot the problem, but am happy to test ideas if it helps. i'll wait to >include various config files until requested. > >-- System Information: >Debian Release: squeeze/sid > APT prefers testing > APT policy: (500, 'testing') >Architecture: i386 (i686) > >Kernel: Linux 2.6.30-1-686 (SMP w/2 CPU cores) >Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) >Shell: /bin/sh linked to /bin/dash > >Versions of packages sudo-ldap depends on: >ii libc6 2.9-25 GNU C Library: Shared libraries >ii libldap-2.4-2 2.4.17-1 OpenLDAP libraries >ii libpam-modules 1.0.1-10 Pluggable Authentication Modules f >ii libpam0g 1.0.1-10 Pluggable Authentication Modules l > >sudo-ldap recommends no packages. > >sudo-ldap suggests no packages.