Control: tag -1 patch
The attached DEP3 patch implements what the submitter correctly
analyzed as the code not applying configuration options to the
connection.
sudo-631268-fix-sudo_ldap_set_options_table.patch.gz
Description: application/gzip
The actual problem is that sudo doesn't recognize
the DEREF setting in ldap.conf. This will be fixed in sudo 1.8.3.
I backported sudo-ldap 1.8.3p1-2 for squeeze and tried ist again.
It still does not work. Some Options are recognized as you can see from
sudoers_debug 2 Output:
sudo:
Sudo does its own ldap.conf parsing and does not use the values
preloaded by the OpenLDAP libraries since that also reads $HOME/.ldaprc
and ./ldaprc. The actual problem is that sudo doesn't recognize
the DEREF setting in ldap.conf. This will be fixed in sudo 1.8.3.
Very old versions of sudo did
Package: sudo-ldap
Version: 1.7.4p4-2.squeeze.2
Severity: important
When upgrading from lenny to squeeze sudo-ldap lost the ability to dereference
ldap aliases. In ldap.conf DEREF ist set to always.
sudo-ldap works if i give a search base which doesn't require derefererencing.
As last try i
4 matches
Mail list logo
