From owner-freebsd-stable@FreeBSD.ORG Wed Mar 10 06:58:19 2010 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 555FD106567C for ; Wed, 10 Mar 2010 06:58:19 +0000 (UTC) (envelope-from uranus@tinlans.org) Received: from tinlans.org (tinlans.org [220.133.199.45]) by mx1.freebsd.org (Postfix) with ESMTP id 091BE8FC0C for ; Wed, 10 Mar 2010 06:58:18 +0000 (UTC) Received: from tinlans.org (localhost [127.0.0.1]) by tinlans.org (Postfix) with ESMTP id 6C297CF042; Wed, 10 Mar 2010 14:58:50 +0800 (CST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=tinlans.org; h= x-mailer:content-transfer-encoding:content-type:content-type :mime-version:date:date:subject:subject:in-reply-to:references :from:from:message-id:received:received; s=tinlans; t= 1268204330; bh=6dObHm1rENMHePETW0BPx+dEK/XQ+jRt/4ckW3plId8=; b=K GB3uLxsdVDij11UZ9p1zNvSNk6E6duaSXsTwcH0z+QFp3ty44V+42saoDx4cebXK dYQQOGMuZFCgvtsvrGEEA== X-Virus-Scanned: amavisd-new at tinlans.org Received: from tinlans.org ([127.0.0.1]) by tinlans.org (tinlans.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B9ARNCBdtE0P; Wed, 10 Mar 2010 14:58:50 +0800 (CST) Received: from TinlansPC (TinlansPC [192.168.1.2]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by tinlans.org (Postfix) with ESMTPSA id 22836CF040; Wed, 10 Mar 2010 14:58:50 +0800 (CST) Message-ID: From: "Linghua Tseng" To: "Greg Byshenk" References: <20100309000826.GF4648@cesium.hyperfine.info> <80F42CAF32A14A1FB43B830AAF877A5A@TinlansPC> <20100309191157.GG2303@core.byshenk.net> In-Reply-To: <20100309191157.GG2303@core.byshenk.net> Date: Wed, 10 Mar 2010 14:58:04 +0800 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal Importance: Normal X-Mailer: Microsoft Windows Live Mail 14.0.8089.726 X-Mimeole: Produced By Microsoft MimeOLE V14.0.8089.726 Cc: freebsd-stable@freebsd.org Subject: Re: Supplementary groups on LDAP cannot work with RELENG_8 +nss_ldap X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Mar 2010 06:58:19 -0000 Thanks. I have tried to modify my /etc/nsswitch.conf to: group: compat group_compat: ldap hosts: files dns networks: files passwd: compat passwd_compat: ldap shells: files services: compat services_compat: nis protocols: files rpc: files But the problem is still occurred. -------------------------------------------------- From: "Greg Byshenk" Sent: Wednesday, March 10, 2010 3:11 AM To: "Linghua Tseng" Cc: "Peter C. Lai" ; Subject: Re: Supplementary groups on LDAP cannot work with RELENG_8 +nss_ldap > On Tue, Mar 09, 2010 at 09:00:49AM +0800, Linghua Tseng wrote: > >> Here is the output of `diff -u /usr/src/etc/nsswitch.conf >> /etc/nsswitch.conf'. >> --- /usr/src/etc/nsswitch.conf 2010-03-08 09:04:25.000000000 +0800 >> +++ /etc/nsswitch.conf 2010-03-08 18:01:08.000000000 +0800 >> @@ -1,13 +1,13 @@ >> # >> # nsswitch.conf(5) - name service switch configuration file >> -# $FreeBSD: src/etc/nsswitch.conf,v 1.1.10.1 2009/08/03 08:13:06 kensmith >> Exp $ >> +# $FreeBSD: src/etc/nsswitch.conf,v 1.1 2006/05/03 15:14:47 ume Exp $ >> # >> group: compat >> -group_compat: nis >> +group_compat: ldap nis >> hosts: files dns >> networks: files >> passwd: compat >> -passwd_compat: nis >> +passwd_compat: ldap nis >> shells: files >> services: compat >> services_compat: nis >> >> The line `+:*::::::::' has already put into /etc/master.passwd, >> and the line `+:*::' has already put into /etc/group. > > I may be completely wrong (I can't seem to find the source), and I > don't know if it is the source of your problem, but I recall it being > reported that 'passwd_compat' and 'group_compat' require a *single* > source entry. > > > -- > greg byshenk - gbyshenk@byshenk.net - Leiden, NL > >