[Pkg-sssd-devel] Bug#1129522: libsss-sudo: Can't sudo after installing libsss-sudo (due to broken nsswitch update)

[Guilherme Puida Moreira]

Hello,

On Mon, 02 Mar 2026 11:00:58 +0000 Allison Karlitskaya <allison at lowercase.ca> wrote:
> Which seems to be caused by libsss-sudo assuming that the entry should
> already exist as "sudoers: files" and trying to add "sss" to the end of
> it.  This was proposed in base-files but not yet in the distribution
> (also after dist-upgrade): https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770825

We also got this bug reported in Ubuntu [1]. I have a proposed fix [2]
that boils down to:

1. Adding "files" to "libsss-sudo.nss";
2. Doing some postinst scripting to add "files" to /etc/nsswitch if "sss" is present.

(1) fixes new installations, and (2) fixes the upgrade from a broken
version. I have also attached the patch here.

Does this sound reasonable, or am I missing something?

Thanks,
-- 
puida
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-libsss-sudo-ensure-files-is-present-in-nsswitch.conf.patch
Type: text/x-patch
Size: 1595 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-sssd-devel/attachments/20260610/41f2a2bd/attachment.bin>