From owner-freebsd-security@FreeBSD.ORG  Tue Feb  7 14:53:56 2006
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
X-Original-To: freebsd-security@freebsd.org
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 98FDE16A420
	for <freebsd-security@freebsd.org>;
	Tue,  7 Feb 2006 14:53:56 +0000 (GMT)
	(envelope-from Markus.Orebrand@operax.com)
Received: from smtp.operax.com (net-internal.operax.com [213.50.74.197])
	by mx1.FreeBSD.org (Postfix) with SMTP id B990343D46
	for <freebsd-security@freebsd.org>;
	Tue,  7 Feb 2006 14:53:55 +0000 (GMT)
	(envelope-from Markus.Orebrand@operax.com)
Received: (qmail 90137 invoked by uid 0); 7 Feb 2006 14:53:51 -0000
Received: from lulex02.ad.operax.com (192.168.2.13)
	by treo.operax.com with SMTP; 7 Feb 2006 14:53:51 -0000
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Tue, 7 Feb 2006 15:53:50 +0100
Message-ID: <33656995C5C5094A983DE84DA649A9244A0046@lulex02.ad.operax.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: LDAP and Linux compatibility
Thread-Index: AcYr9k6KhEwR5GmHSYyoZR9PaG7P/Q==
From: =?iso-8859-1?Q?Markus_=D6rebrand?= <Markus.Orebrand@operax.com>
To: <freebsd-security@freebsd.org>
Subject: LDAP and Linux compatibility
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Feb 2006 14:53:56 -0000

While this is a fairly old thread, there may still be people looking for
the *correct* answer for this question (at least I were 10 minutes
ago...)

So, the problem is that some applications (acroread7 in this case)
refuse to start when run on a NIS or LDAP (client?), with a message
containing:

GLib-WARNING **: getpwuid_r(): failed due to unknown user id

See more about the problem in previous posts in this thread.

The resolution is to edit /compat/linux/etc/nsswitch.conf, and change

  passwd:     files
  shadow:     files
  group:      files

to:

  passwd:    db files nisplus nis
  shadow:    db files nisplus nis
  group:     db files nisplus nis

LDAP clients should also have 'ldap' after 'nis' in these rows.

By the way, editing /etc/nsswitch.conf is the way to go to set lookup
priorities for PAM in Linux.=20

--
Markus =D6rebrand         Markus.Orebrand@operax.com
Systems Administrator   Operax - Guaranteed QoS