RE: problems with su over ssl in RHES V5.2

[Licause, Al]

Hello,

We have found some odd behviour with su in the V5.2 release of Redhat's
Enterprise server.

If you attempt to su - username    or su username   with an ldapuser such
that the connection between the ldap client and ldap server is running
over ssl,  su simply brings you back to the shell prompt and does
nothing.

The secure log file shows a connection and an immediate disconnect.

Tcpdump shows an immediate abort by the client after a security certificate 
failure
is detected.

Yet this works if you run    strace -o outputfile su ldapuser

If you eliminate the -o outputfile option from strace, it fails as well.

Is there perhaps a timing issue at work here ?

I'm afraid I'm not a good enough coder/compiler to be able to debug this
any further.     If there is some configuration difference or something subtle
about the way su works in this version, could you please explain ?

Thanks

Al Licause
HP Services
Unix Network Team