Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-3742: "dzdo: must be setuid root" after running apt-get install from Ubuntu repos

Centrify DirectControl ,  

12 April,16 at 11:21 AM

Applies to: Centrify DirectControl 5.1.1 on Ubuntu platforms only.

Question:
On a Centrify Ubuntu server running Centrify DirectControl 5.0.x, after doing an apt-get install of the centrifydc package, it is noticed that sudo/dzdo commands stop working. The specific message is

tu1@ubsvr1004v1:/$ dzdo id
dzdo: must be setuid root

Is there any reason for this?

Answer:
This is a known issue with Centrify's packaging that was made available to Ubuntu (Canonical). 

Follow the steps below on the affected servers

$ su - root
Password:
# chmod 4755 /usr/share/centrifydc/libexec/dzdo

Cross-check other binaries that need to be set for setuid:

ted@b-ubuntu1204:/usr/share/centrifydc$ pwd
/usr/share/centrifydc
ted@b-ubuntu1204:/usr/share/centrifydc$ find . -perm /ug+s
./libexec/adid
./libexec/adsetgroups
./libexec/dzedit
./libexec/dzdo

Note: 
Centrify worked with vendor and resolved this issue

http://en.wikipedia.org/wiki/Setuid 

Centrify Corporation does not take any responsibility for the content or availability of this link and it was provided as a courtesy.  Customers should contact the vendor if there are any further questions

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.