[sudo-users] new sudo error

Michael W. Lucas mwlucas at michaelwlucas.com
Sat Oct 19 20:34:29 MDT 2013


Thanks, everyone. I will ignore until we upgrade.

On Fri, Oct 18, 2013 at 02:34:27PM -0600, Todd C. Miller wrote:
> Unfortunately, the return value of pam_setcred() is completely
> useless since with stacked PAM auth modules a failure from one
> module may override PAM_SUCCESS from another.  If the first module
> in the stack fails, the others may be run (and succeed) but an error
> will be returned.  This can cause a spurious warning on systems
> with non-local users (e.g. pam_ldap or pam_sss) where pam_unix is
> consulted first.
> 
> Sudo 1.8.8 ignores errors from pam_setcred() like previous versions
> did.
> 
>  - todd

-- 
Michael W. Lucas  -  mwlucas at michaelwlucas.com, Twitter @mwlauthor 
http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/
Absolute OpenBSD 2/e - http://www.nostarch.com/openbsd2e
coupon code "ILUVMICHAEL" gets you 30% off & helps me.


More information about the sudo-users mailing list