From owner-freebsd-security@FreeBSD.ORG  Tue Feb  7 15:07:32 2006
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
X-Original-To: freebsd-security@freebsd.org
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8DAF716A420
	for <freebsd-security@freebsd.org>;
	Tue,  7 Feb 2006 15:07:32 +0000 (GMT)
	(envelope-from Markus.Orebrand@operax.com)
Received: from smtp.operax.com (net-internal.operax.com [213.50.74.197])
	by mx1.FreeBSD.org (Postfix) with SMTP id AF04243D7B
	for <freebsd-security@freebsd.org>;
	Tue,  7 Feb 2006 15:07:25 +0000 (GMT)
	(envelope-from Markus.Orebrand@operax.com)
Received: (qmail 69687 invoked by uid 0); 7 Feb 2006 15:07:24 -0000
Received: from lulex02.ad.operax.com (192.168.2.13)
	by treo.operax.com with SMTP; 7 Feb 2006 15:07:24 -0000
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Tue, 7 Feb 2006 16:07:23 +0100
Message-ID: <33656995C5C5094A983DE84DA649A9244A004F@lulex02.ad.operax.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: LDAP and Linux compatibility
Thread-Index: AcYr9k6KhEwR5GmHSYyoZR9PaG7P/QAAWlFw
From: =?iso-8859-1?Q?Markus_=D6rebrand?= <Markus.Orebrand@operax.com>
To: <freebsd-security@freebsd.org>
Subject: RE: LDAP and Linux compatibility
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Feb 2006 15:07:32 -0000

The old thread is here:

http://lists.freebsd.org/pipermail/freebsd-security/2005-March/002766.ht
ml

--
Markus =D6rebrand         Markus.Orebrand@operax.com
Systems Administrator   Operax - Guaranteed QoS

> -----Original Message-----
> From: owner-freebsd-security@freebsd.org=20
> [mailto:owner-freebsd-security@freebsd.org] On Behalf Of=20
> Markus =D6rebrand
> Sent: den 7 februari 2006 15:54
> To: freebsd-security@freebsd.org
> Subject: LDAP and Linux compatibility
>=20
> While this is a fairly old thread, there may still be people=20
> looking for
> the *correct* answer for this question (at least I were 10 minutes
> ago...)
>=20
> So, the problem is that some applications (acroread7 in this case)
> refuse to start when run on a NIS or LDAP (client?), with a message
> containing:
>=20
> GLib-WARNING **: getpwuid_r(): failed due to unknown user id
>=20
> See more about the problem in previous posts in this thread.
>=20
> The resolution is to edit /compat/linux/etc/nsswitch.conf, and change
>=20
>   passwd:     files
>   shadow:     files
>   group:      files
>=20
> to:
>=20
>   passwd:    db files nisplus nis
>   shadow:    db files nisplus nis
>   group:     db files nisplus nis
>=20
> LDAP clients should also have 'ldap' after 'nis' in these rows.
>=20
> By the way, editing /etc/nsswitch.conf is the way to go to set lookup
> priorities for PAM in Linux.=20
>=20
> --
> Markus =D6rebrand         Markus.Orebrand@operax.com
> Systems Administrator   Operax - Guaranteed QoS
>=20
> _______________________________________________
> freebsd-security@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to=20
> "freebsd-security-unsubscribe@freebsd.org"
>=20