Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 7 Jul 2006 20:18:04 +0400
From:      Dmitriy Kirhlarov <dimma@higis.ru>
To:        stable@freebsd.org
Subject:   nsswitch.conf problem with group status code
Message-ID:  <20060707161801.GB42118@dimma.mow.oilspace.com>

next in thread | raw e-mail | index | archive | help

Hi, list.

I use mixed (master.passwd + ldap) authorization.
I have a problem -- when network unreacheble, local users can't login
to system.
After investigation, I find reason -- timeouts, when resolver try
return ldap server IP.

I add to /etc/nsswitch.conf:
group: files [success=return notfound=continue unavail=continue tryagain=continue] ldap
passwd: files [success=return notfound=continue unavail=continue tryagain=continue] ldap

and add in /usr/local/etc/ldap.conf
debug 257

After that, I run
id root
I find, what success=return don't work for group -- we trying
connecting to ldap server and get extended grouplist.

Why my status code setup ignoring?

WBR
-- 
Dmitriy Kirhlarov
OILspace, 26 Leninskaya sloboda, bld. 2, 2nd floor, 115280 Moscow, Russia
P:+7 495 105 7247 ext.203 F:+7 495 105 7246 E:DmitriyKirhlarov@oilspace.com
OILspace - The resource enriched - www.oilspace.com



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060707161801.GB42118>