@Andreas: wow, that explains a lot, especially why installing nscd seems to help.
Because if nscd is not running, the libnss_ldap function getpwnam() resolves to will run in process, and someone in there (libgnutls ?) does the priviledge drop.
Good catch, let's investigate further.
@Andreas: wow, that explains a lot, especially why installing nscd seems to help.
Because if nscd is not running, the libnss_ldap function getpwnam() resolves to will run in process, and someone in there (libgnutls ?) does the priviledge drop.
Good catch, let's investigate further.