12 April,16 at 11:21 AM
Applies to: Centrify DirectControl 5.1.1 on Ubuntu platforms only.
Question:
On a Centrify Ubuntu server running Centrify DirectControl 5.0.x, after doing an apt-get install of the centrifydc package, it is noticed that sudo/dzdo commands stop working. The specific message is
tu1@ubsvr1004v1:/$ dzdo id
dzdo: must be setuid root
Is there any reason for this?
Answer:
This is a known issue with Centrify's packaging that was made available to Ubuntu (Canonical).
Follow the steps below on the affected servers
$ su - root
Password:
# chmod 4755 /usr/share/centrifydc/libexec/dzdo
Cross-check other binaries that need to be set for setuid:
ted@b-ubuntu1204:/usr/share/centrifydc$ pwd
/usr/share/centrifydc
ted@b-ubuntu1204:/usr/share/centrifydc$ find . -perm /ug+s
./libexec/adid
./libexec/adsetgroups
./libexec/dzedit
./libexec/dzdo
Note:
Centrify worked with vendor and resolved this issue
http://en.wikipedia.org/wiki/Setuid
Centrify Corporation does not take any responsibility for the content or availability of this link and it was provided as a courtesy. Customers should contact the vendor if there are any further questions