[Bug 423252] Re: NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2 suexec, and atd

cdmiller cdmiller at adams.edu
Tue Apr 3 14:44:34 UTC 2012


Re #120 (adam-stokes)

The best workable solution for me would be working official packages for
Lucid and Pangolin.  Working LDAP authn/z over TLS is baseline
functionality for us (servers and academic computer labs).

I've had no problems with the patch from #73 thus far on our Lucid
servers.  Most traffic is Apache php/suexec.  Day to day use is sudo/su
for sysadmins.  Have not noticed any side effects.  We've been running
this way since 2011-04-11.

Currently planning to test nutznbotz #113 gnutls using nettle and
adejong #119 nss-pam-ldapd,  but not until summer when we test Pangolin
for production.

Thanks canonical folks and patch contributors for all the great work on
this.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in Ubuntu.
https://bugs.launchpad.net/bugs/423252

Title:
  NSS using LDAP+SSL breaks setuid applications like su, sudo, apache2
  suexec, and atd

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-release-notes/+bug/423252/+subscriptions



More information about the Ubuntu-server-bugs mailing list