pam_ldap and nss_ldap : checken and egg problem with "wheel" group and "su" utility

[Dag-Erling Smørgrav]

"Chao Shin" <quakelee at geekcn.org> writes:
> "Lev Serebryakov" <lev at freebsd.org> writes:
> > But when "wheel" is in /etc/group with only "root" member (as all
> > other members are in LDAP), system never takes "wheel" members from
> > LDAP (because /etc/group has priority) and "su" doesn't work!
> I don't have system to test this now, but you can try below config in your
> nsswitch.conf
>
> group: files [success=return notfound=continue] ldap
> passwd: files [success=return notfound=continue] ldap

That won't make any difference, because "files" *will* succeed, since
there is a wheel entry in /etc/group.

(actually, I believe [success=return notfound=continue] is the default
behavior)

DES
-- 
Dag-Erling Smørgrav - des at des.no