Using [Open]LDAP for authentication

Daniel O'Connor doconnor at gsoft.com.au
Sun Jan 22 00:12:51 PST 2006


On Sunday 22 January 2006 15:44, Andrew Zenk wrote:
> My guess is that you have a group (wheel) defined in /etc/group that
> is conflisting with the one in ldap.  I've had this issue before.  I
> solved it by deleteing the offending group from the group file.
> Another solution would be to tell sudo to look for a different group
> and make sure the LDAP group is unique.

Yeah, I worked around it by adding the few sudo/su users to the group file.

I am surprised that this is necessary though - I would expect nss to look 
through all resources and merge group entries.

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
"The nice thing about standards is that there
are so many of them to choose from."
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20060122/afb577b2/attachment.bin


More information about the freebsd-stable mailing list