From owner-freebsd-stable@FreeBSD.ORG  Wed Mar  5 15:31:29 2014
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id A1E12754
 for <freebsd-stable@freebsd.org>; Wed,  5 Mar 2014 15:31:29 +0000 (UTC)
Received: from mail.geek.sh (decoder.geek.sh [196.36.198.81])
 (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits))
 (No client certificate requested)
 by mx1.freebsd.org (Postfix) with ESMTPS id 3E5238C5
 for <freebsd-stable@freebsd.org>; Wed,  5 Mar 2014 15:31:28 +0000 (UTC)
Received: from fuzz.geek.sh (105-236-212-185.access.mtnbusiness.co.za
 [105.236.212.185])
 (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits))
 (No client certificate requested)
 by mail.geek.sh (Postfix) with ESMTPSA id 02E6820434
 for <freebsd-stable@freebsd.org>; Wed,  5 Mar 2014 17:31:18 +0200 (SAST)
Message-ID: <53174346.6070703@phat.za.net>
Date: Wed, 05 Mar 2014 17:31:18 +0200
From: Aragon Gouveia <aragon@phat.za.net>
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64;
 rv:24.0) Gecko/20100101 Thunderbird/24.2.0
MIME-Version: 1.0
To: freebsd-stable@freebsd.org
Subject: NSS ldap errors
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable/>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Mar 2014 15:31:29 -0000

Hi,

I'm trying to implement net/nss-pam-ldapd on 9.2-RELEASE, and hitting 
some NSS issues.  PAM authentication with SSH works fine, but there are 
a lot of NSS errors in /var/log/debug.log:

Mar  4 17:15:00 <cron.debug> cstor1 cron[68418]: NSSWITCH(_nsdispatch): 
ldap, passwd, getpwnam_r, not found, and no fallback provided
Mar  4 17:15:00 <cron.debug> cstor1 cron[68418]: NSSWITCH(_nsdispatch): 
ldap, group, setgrent, not found, and no fallback provided
Mar  4 17:15:00 <cron.debug> cstor1 cron[68418]: NSSWITCH(_nsdispatch): 
ldap, group, getgrent_r, not found, and no fallback provided
Mar  4 17:15:00 <cron.debug> cstor1 cron[68418]: NSSWITCH(_nsdispatch): 
ldap, group, endgrent, not found, and no fallback provided
Mar  4 17:15:00 <cron.debug> cstor1 cron[68418]: NSSWITCH(_nsdispatch): 
ldap, passwd, endpwent, not found, and no fallback provided
Mar  4 17:15:11 <user.debug> cstor1 -bash: NSSWITCH(_nsdispatch): ldap, 
passwd, getpwuid_r, not found, and no fallback provided
Mar  4 17:15:11 <user.debug> cstor1 -bash: NSSWITCH(_nsdispatch): ldap, 
passwd, endpwent, not found, and no fallback provided

And in the case of bash, it's unable to resolve the LDAP username, and 
the resulting PS1 prompt shows:

[I have no name!@cstor1 ~]$

The author of nss-pam-ldapd isn't sure what the problem is:

http://lists.arthurdejong.org/nss-pam-ldapd-users/2014/msg00044.html

FWIW, the same problems occur with net/nss_ldap.

Any NSS gurus who can help?


Thanks,
Aragon