[sudo-users] 1.7.0rc1 interesting tests

Todd C. Miller Todd.Miller at courtesan.com
Wed Jun 11 09:48:02 EDT 2008


In message <484C7E25.1080004 at mayo.edu>
	so spake Patrick Spinler (spinler.patrick):

> On SuSE enterprise 9.4, rc1 sudoedit works like a champ.
> 
> Some problems with ldap sudoers, though.
> 
> pjs11 at mr-dzl01:~> /usr/local/bin/sudo -l
> LDAP Config Summary
> ===================
> host             ha-unixhead2.mayo.edu ei-unixhead2.mayo.edu
> nssmail.mayo.edu
> port             -1
> ldap_version     3
> sudoers_base     ou=sudoers,dc=nss,dc=mayo,dc=edu
> binddn           (anonymous)
> bindpw           (anonymous)
> ssl              start_tls
> ===================
> sudo: ldap_create()
> sudo: ldap_set_option(LDAP_OPT_HOST_NAME, ha-unixhead2.mayo.edu
> ei-unixhead2.mayo.edu nssmail.mayo.edu)
> sudo: ldap_set_option: debug -> 0
> sudo: ldap_set_option: ldap_version -> 3
> sudo: ldap_start_tls_s(): Connect error
> Sorry, user pjs11 may not run sudo on mr-dzl01.
> 
> 
> This is a fresh compile, so none of my last suspected error of mixing os
> versions. :-)  It's even a different architecture, so my prior compiles
> would just through an error ...

I don't recall whether this was resolved or not.  If not, try
commenting out the:

    #define HAVE_LDAP_CREATE 1

line in config.h and see if that makes any difference.

 - todd



More information about the sudo-users mailing list