Date: Fri, 23 Sep 2011 23:08:02 +0400 From: Lev Serebryakov <lev@FreeBSD.org> To: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no> Cc: freebsd-security@freebsd.org Subject: Re: pam_ldap and nss_ldap : checken and egg problem with "wheel" group and "su" utility Message-ID: <964986730.20110923230802@serebryakov.spb.ru> In-Reply-To: <86d3esy554.fsf@ds4.des.no> References: <679126918.20110922121706@serebryakov.spb.ru> <86d3esy554.fsf@ds4.des.no>
next in thread | previous in thread | raw e-mail | index | archive | help
Hello, Dag-Erling. You wrote 22 =D1=81=D0=B5=D0=BD=D1=82=D1=8F=D0=B1=D1=80=D1=8F 2011 =D0=B3.,= 19:21:27: > Lev Serebryakov <lev@FreeBSD.org> writes: >> But when "wheel" is in /etc/group with only "root" member (as all >> other members are in LDAP), system never takes "wheel" members from >> LDAP (because /etc/group has priority) and "su" doesn't work! > Did you try changing the priority in /etc/nsswitch.conf? It gives very long boot time, as nss_ldap waits for answer from non-started server, again and again, etc. --=20 // Black Lion AKA Lev Serebryakov <lev@serebryakov.spb.ru>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?964986730.20110923230802>