Comment 5 for bug 115967

Revision history for this message
Victor Hugo dos Santos (victorhugops) wrote :

Hello,

we have the same problem here...

Configuration:
=================
$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=9.10
DISTRIB_CODENAME=karmic
DISTRIB_DESCRIPTION="Ubuntu 9.10"

$ dpkg -l | grep sudo
rc sudo 1.7.0-1ubuntu2 Provide limited super user privileges to specific users
ii sudo-ldap 1.7.0-1ubuntu2 Provide limited super user privileges to specific users

$ sudo cat /etc/ldap/ldap.conf
BASE dc=multiexportfoods,dc=com
URI ldaps://fds.multiexportfoods.com:636
TLS_CACERT /etc/ssl/certs/ca-certificates.crt
TLS_REQCERT never

sudoers_base ou=SUDOers,dc=multiexportfoods,dc=com
=================

running command "sudo -l" I have this output:

==============
$sudo -l
[sudo] password for victor:
Sorry, user victor may not run sudo on server.
==============

Nota.: changing the "sudoers_debug" option on /etc/ldap/ldap.conf to
sudoers_debug 2
sudoers_debug 5
sudoers_debug 20
sudoers_debug 50

no make differ !!! :(
on others words, debug not work.

more info:

the ldaps work fine, because I can authenticate users with it:
$getent passwd victor
victor:x:5555:55555:Victor Hugo dos Santos,,,:/home/victor:/bin/bash

I read notes that the problem is "only" with ldaps... and if I configure ldap (without SSL), so works !!!
but, in my company this isn't a option.

saludos