[sudo-users] LDAP libs do not support ldap_start_tls_s() or ldap_start_tls_s_np()

[Todd C. Miller]

On Thu, 26 Jul 2012 16:08:43 BST, "Daniel Crisp" wrote:

> Thanks for the advice Todd.
> 
> I've altered my ldap.conf according but now I seem to be getting a new error:
>  
> $ sudo -i bash
> sudo: ldap_sasl_bind_s(): Can't contact LDAP server
> 
> I know that this particular Solaris server can communicate with the LDAP serv
> er.  I'll attempt your second suggestion and by that I'm assuming you mean re
> -compile with --with-libpath=/path/to/openldap/libs?

Yes, that should work.  If you want to try and debug the problem
you are having with the Solaris LDAP libraries you could temporarily
add the line:

#sudoers_debug 2

to ldap.conf.

Note that sudo 1.7.4p4 is almost two years old and it is possible
that a newer version would work better.

 - todd