sudo sssd ldap segmentation fault

[craigstrydom]

This seems to be comparable to this bug: https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/1327268
The same situation with the same results but in 16.04 Xenial Release - sudo_1.8.16-0ubuntu1_amd64.deb.

The problem is resolved by installing the Trusty sudo package - sudo_1.8.9p5-1ubuntu1.1_amd64.deb.

This problem does not exist if sssd is not installed.

lsb_release -rd
Description: Ubuntu 16.04 LTS
Release: 16.04

apt-cache policy sudo
sudo:
  Installed: 1.8.16-0ubuntu1
  Candidate: 1.8.16-0ubuntu1
  Version table:
 *** 1.8.16-0ubuntu1 500
        500 ftp://ls-mirror.csir.co.za/mirrors/ubuntu/repositories/xenial xenial/main amd64 Packages
        100 /var/lib/dpkg/status

The local repo is built from archive.ubuntu.com via debmirror.
All updates installed.

Expected result:
sudo -l to show sudo permissions

Received result:
Segmentation fault (core dumped)

/var/log/syslog:
Apr 26 17:17:24 cstrydom-vm1 kernel: [ 709.535083] sudo[10116]: segfault at 0 ip 00007fa7a7aac944 sp 00007ffe547c4458 error 4 in sudoers.so[7fa7a7a80000+4b000]

gdb output:
Starting program: /usr/bin/sudo
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
sudo: effective uid is not 0, is /usr/bin/sudo on a file system with the 'nosuid' option set or an NFS file system without root privileges?
[Inferior 1 (process 4911) exited with code 01]

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Marcus (blackhawk60)]

This is a major problem for me. I also cannot log into X.

Any ideal when this will get fixed?

[Marc Deslauriers (mdeslaur)]

This may be a dupe of bug 1565567.

Have you tried the sudo package in xenial-proposed? (1.8.16-0ubuntu1.1)

[Ben Kulbertis (ben-kulbertis)]

Thanks Marc. I just tested with 1.8.16-0ubuntu1.1 on xenial and it fixed the issue for me. It would seem to me this is a duplicate.

[Marc Deslauriers (mdeslaur)]

Thanks for testing it. Could you please add a comment to bug 1565567 that you tested it successfully? Thanks!