Re: pam_ldap and nss_ldap : checken and egg problem with "wheel"

"Chao Shin" <[e-mail]> writes:
> "Lev Serebryakov" <[e-mail]> writes:
> > But when "wheel" is in /etc/group with only "root" member (as all
> > other members are in LDAP), system never takes "wheel" members from
> > LDAP (because /etc/group has priority) and "su" doesn't work!
> I don't have system to test this now, but you can try below config in your
> nsswitch.conf
>
> group: files [success=3Dreturn notfound=3Dcontinue] ldap
> passwd: files [success=3Dreturn notfound=3Dcontinue] ldap

That won't make any difference, because "files" *will* succeed, since
there is a wheel entry in /etc/group.

(actually, I believe [success=3Dreturn notfound=3Dcontinue] is the default
behavior)

DES
--=20
Dag-Erling Sm=C3=B8rgrav - [e-mail]
_______________________________________________
[e-mail] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[e-mail]"