Date: Sat, 24 Sep 2011 14:03:32 +0200 From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no> To: Lev Serebryakov <lev@FreeBSD.org> Cc: freebsd-security@freebsd.org Subject: Re: pam_ldap and nss_ldap : checken and egg problem with "wheel" group and "su" utility Message-ID: <86r5369mgb.fsf@ds4.des.no> In-Reply-To: <964986730.20110923230802@serebryakov.spb.ru> (Lev Serebryakov's message of "Fri, 23 Sep 2011 23:08:02 %2B0400") References: <679126918.20110922121706@serebryakov.spb.ru> <86d3esy554.fsf@ds4.des.no> <964986730.20110923230802@serebryakov.spb.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
Lev Serebryakov <lev@FreeBSD.org> writes: > Dag-Erling <des@des.no> writes: > > Did you try changing the priority in /etc/nsswitch.conf? > It gives very long boot time, as nss_ldap waits for answer from > non-started server, again and again, etc. The only solution I can think of is to try to figure out how to reduce or eliminate this delay, because the system is doing exactly what you asked it to, i.e. treating /etc/group as authoritative and using LDAP only for groups it can't find there. DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?86r5369mgb.fsf>