Attachment 313562 Details for Bug 458067 – RHEL5.2 x86_64 - sudo does not work with pam LDAP module

RHEL5.2 x86_64 - sudo does not work with pam LDAP module

RHEL5.2_sudo_pam_LDAP.txt (text/plain), 1.56 KB, created by Greg Sawicki on 2008-08-06 13:31:51 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Greg Sawicki

Created: 2008-08-06 13:31:51 UTC

Size: 1.56 KB

patch

obsolete

>1. we use pam LDAP module here and it worked fine with RHEL3/4 installations
>2. In the process of evaluating RHEL5.2 we noticed sudo stopped working with our pam LDAP module
>3. Initial background info
>	- any x86_64 hardware platform
>	- OS installed from distribution media - kernel 2.6.18-92.el5 x86_64
>	- sudo package from installation media version sudo-1.6.8p12-12.el5
>	- stock /etc/ldap.conf as it comes out of installation
>	- user password encrypted in /etc/shadow file
>	- sudo works with above conditions in place
>	- change user authentication to pam LDAP module, 'login' and 'su' work fine
>	- attempt to invoke sudo results in this:
>		Password:
>		Sorry, try again.
>		Password:
>		Sorry, try again.
>		Password:
>		Sorry, try again.
>		sudo: 3 incorrect password attempts
>4. Troubleshooting yelds this:
>	- install source RPM sudo-1.6.8p12-12.el5.src.rpm
>	- modify sudo.spec file by dropping '--with-ldap' from /configure' options
>	- build binary rpm from modified spec
>	- uninstall original rpm
>	- install modified rpm
>	- sudo now works with pam LDAP module
>5. Other problem resolution attempts
>	- checked with RedHat and sudo-1.6.8p12-12.el5 is the latest version available
>	- there is older sudo-1.6.8p12-10 version available but it exhibits same behaviour
>	- downloaded latest sudo sudo-1.6.9p17.tar.gz from sudo site directly
>	- built binary from sudo-1.6.9p17.tar.gz using same 'configure' options that are present in RHEL source RPM's spec file
>	- installed generic sudo binary into /usr/local/bin
>	- /usr/local/bin/sudo works with pam LDAP module
>
>

Actions: View

Attachments on bug 458067: 313562