[sudo-users] sudo 1.8.17 target user group membership problem

[Armin Kunaschik]

Hello,

yesterday I updated from 1.8.13 to 1.8.17 and ran into a lot problems.
Reason seems to be that the group membership of the target user is not
set correctly:

sudo 1.8.13:
$ id
uid=400(sudouser) gid=400(sudouser) groups=1(staff)
$ sudo -u oracle id
uid=207(oracle) gid=500(oracle)

sudo 1.8.17:
$ id
uid=400(sudouser) gid=400(sudouser) groups=1(staff)
$ sudo -u oracle id
uid=207(oracle) gid=400(sudouser) groups=1(staff)

Was there a change in the default behavior on how to hande group memberships?
Or is this a bug? Or something completely different?
I'm using the AIX 5.3 rpm package from sudo.ws and run things on AIX
6.1 and 7.1.

Regards,
Armin