From owner-freebsd-questions@FreeBSD.ORG  Sun Nov 23 14:39:47 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 114CC106564A
	for <freebsd-questions@freebsd.org>;
	Sun, 23 Nov 2008 14:39:47 +0000 (UTC)
	(envelope-from estartu@ze.tum.de)
Received: from inga.augusta.de (inga.augusta.de [77.90.142.2])
	by mx1.freebsd.org (Postfix) with ESMTP id 84F008FC08
	for <freebsd-questions@freebsd.org>;
	Sun, 23 Nov 2008 14:39:46 +0000 (UTC)
	(envelope-from estartu@ze.tum.de)
Received: from inga.augusta.de (localhost [127.0.0.1])
	by inga.augusta.de (8.13.4/8.13.4) with ESMTP id mANEAAkC027667
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
	for <freebsd-questions@freebsd.org>;
	Sun, 23 Nov 2008 15:10:11 +0100 (CET)
	(envelope-from estartu@ze.tum.de)
Received: (from uucp@localhost)
	by inga.augusta.de (8.13.4/8.13.4/Submit) with UUCP id mANEAA9u027666
	for freebsd-questions@freebsd.org; Sun, 23 Nov 2008 15:10:10 +0100 (CET)
	(envelope-from estartu@ze.tum.de)
Received: from etustar.starbox.augusta.de (etustar.starbox.augusta.de
	[192.168.71.7])
	by gatekeeper.starbox.augusta.de (8.14.1/8.14.1) with ESMTP id
	mANE73fF002169 for <freebsd-questions@freebsd.org>;
	Sun, 23 Nov 2008 15:07:03 +0100 (CET)
	(envelope-from estartu@ze.tum.de)
Message-ID: <49296382.60808@ze.tum.de>
Date: Sun, 23 Nov 2008 15:06:58 +0100
From: Gerhard Schmidt <estartu@ze.tum.de>
User-Agent: Thunderbird 2.0.0.14 (X11/20080712)
MIME-Version: 1.0
To: freebsd-questions@freebsd.org
X-Enigmail-Version: 0.95.0
Content-Type: text/plain; charset=ISO-8859-15
Content-Transfer-Encoding: 8bit
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-1.5.10
	(inga.augusta.de [127.0.0.1]);
	Sun, 23 Nov 2008 15:10:11 +0100 (CET)
Subject: files before ldap in nsswitch.conf
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 23 Nov 2008 14:39:47 -0000

Hi,

I'm setting up a new FreeBSD Server for out local Computer club. Most of
the users are stored in LDAP and I've installed nss_ldap and pam_ldap
and set up both. Everything works so far with nsswitch.conf
entry passwd: ldap files.

When I try passwd: files ldap the login doesn't work anymore because the
LDAP_Server is never asked.

I tried this to optimize the LDAP requests as the service users are in
the local files. This would speed up the boot process and takes some
load off the LDAP-Server.

Is there a way to configure FreeBSD to look first in the local files and
 if a user isn't found in the LDAP-Server.

And another question. Is there a way to use two different LDAP-Servers
e.g. by calling nss_ldap with different config files.

Greetings
	Estartu

-- 
-------------------------------------------------
Gerhard Schmidt       | E-Mail: schmidt@ze.tum.de
TU-München	      |
WWW & Online Services |
Tel: 089/289-25270    |
Fax: 089/289-25257    | PGP-Publickey auf Anfrage