conf/138961: ldap groups don't work with su

[Gerhard Schmidt]

>Number:         138961
>Category:       conf
>Synopsis:       ldap groups don't work with su
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Sep 19 07:40:04 UTC 2009
>Closed-Date:
>Last-Modified:
>Originator:     Gerhard Schmidt
>Release:        FreeBSD 7.2-PRERELEASE amd64
>Organization:
Technische Universitaet Muenchen
>Environment:
System: FreeBSD helios.ze.tum.de 7.2-PRERELEASE FreeBSD 7.2-PRERELEASE #0: Wed Mar 25 08:20:23 CET 2009 root at helios.ze.tum.de:/usr/src/sys/amd64/compile/HELIOS amd64


	
>Description:
We have a ldap Server for Usermanagement and use nss_ldap and pam_ldap from the ports to 
integrate the Userinformation into FreeBSD. Everything works quite well except for su to root 

When i try to su to root i get su: sorry as if i didn't have the wheel group. id shows that i have the wheel group. 

<------ Sat 19. Sep 2009 08:55:42 ------> 
/usr/home/estartu
estartu at helios:1 -> su -
su: Sorry

<------ Sat 19. Sep 2009 08:56:02 ------> 
/usr/home/estartu
estartu at helios:2 -> id
uid=1505(estartu) gid=1505(estartu) groups=1505(estartu),0(wheel),106(cvs)

It seems that the su command doesn't use the ldap groups. 

>How-To-Repeat:
try su - with a setup where the wheel group comes from ldap

>Fix:
n/k
>Release-Note:
>Audit-Trail:
>Unformatted: