From owner-freebsd-stable@FreeBSD.ORG  Wed Mar 10 11:56:14 2010
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 5AF9F10656A9
	for <freebsd-stable@freebsd.org>; Wed, 10 Mar 2010 11:56:14 +0000 (UTC)
	(envelope-from riccp@ige.unicamp.br)
Received: from saturno.ige.unicamp.br (saturno.ige.unicamp.br [143.106.76.34])
	by mx1.freebsd.org (Postfix) with ESMTP id 074F08FC28
	for <freebsd-stable@freebsd.org>; Wed, 10 Mar 2010 11:56:13 +0000 (UTC)
Received: from saturno.ige.unicamp.br (localhost [127.0.0.1])
	by saturno.ige.unicamp.br (Postfix) with ESMTP id B9198206F18;
	Wed, 10 Mar 2010 08:36:38 -0300 (BRT)
X-Virus-Scanned: amavisd-new at ige.unicamp.br
Received: from saturno.ige.unicamp.br ([127.0.0.1])
	by saturno.ige.unicamp.br (saturno.ige.unicamp.br [127.0.0.1])
	(amavisd-new, port 10024)
	with LMTP id e5mc44NXa7gn; Wed, 10 Mar 2010 08:36:38 -0300 (BRT)
Received: from netuno.ige.unicamp.br (netuno.ige.unicamp.br [143.106.76.2])
	by saturno.ige.unicamp.br (Postfix) with ESMTP id 76A25206EFC;
	Wed, 10 Mar 2010 08:36:38 -0300 (BRT)
Received: by netuno.ige.unicamp.br (Postfix, from userid 1000)
	id 63A66A35; Wed, 10 Mar 2010 08:36:38 -0300 (BRT)
Date: Wed, 10 Mar 2010 08:36:38 -0300
From: Ricardo Campos Passanezi <riccp@ige.unicamp.br>
To: Linghua Tseng <uranus@tinlans.org>
Message-ID: <20100310113638.GE94966@ige.unicamp.br>
References: <F3B6FDBA2D4E44E49C4DFC8CA2F3A182@TinlansPC>
	<20100309000826.GF4648@cesium.hyperfine.info>
	<80F42CAF32A14A1FB43B830AAF877A5A@TinlansPC>
	<20100309191157.GG2303@core.byshenk.net>
	<E96770AD3CA74C9F8822F19375C60E91@TinlansPC>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <E96770AD3CA74C9F8822F19375C60E91@TinlansPC>
User-Agent: Mutt/1.5.20 (2009-06-14)
Cc: freebsd-stable@freebsd.org, Greg Byshenk <freebsd@byshenk.net>
Subject: Re: Supplementary groups on LDAP cannot work with RELENG_8 +nss_ldap
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Mar 2010 11:56:14 -0000

On Wed, Mar 10, 2010 at 02:58:04PM +0800, Linghua Tseng wrote:
> Thanks.
> 
> I have tried to modify my /etc/nsswitch.conf to:
> 
> group: compat
> group_compat: ldap
> hosts: files dns
> networks: files
> passwd: compat
> passwd_compat: ldap
> shells: files
> services: compat
> services_compat: nis
> protocols: files
> rpc: files

Have you tried with 

group: files ldap
group_compat: nis
passwd: files ldap
passwd_compat: nis


????

> >> group: compat
> >> -group_compat: nis
> >> +group_compat: ldap nis
> >> hosts: files dns
> >> networks: files
> >> passwd: compat
> >> -passwd_compat: nis
> >> +passwd_compat: ldap nis
> >> shells: files
> >> services: compat
> >> services_compat: nis
> >> 
> >> The line `+:*::::::::' has already put into /etc/master.passwd,
> >> and the line `+:*::' has already put into /etc/group.

I don't use the "+:*::...." lines into master.passwd nor into group.


-- 
Ricardo Campos Passanezi - Network Analyst
PGP & GPG public key at:   http://www.ige.unicamp.br/~riccp
Institute of Geosciences - http://www.ige.unicamp.br - UNICAMP