Date: Tue, 24 Jan 2006 12:56:21 -0800 From: "David F. Severski" <davidski@deadheaven.com> To: freebsd-stable@freebsd.org Subject: Re: Using [Open]LDAP for authentication Message-ID: <20060124205621.GU69091@geoff.deadheaven.com> In-Reply-To: <20060120200149.GB54284@dan.emsphone.com> References: <200601201130.18872.doconnor@gsoft.com.au> <7daacbbe0601192341p32673972j8f309dff1df543aa@mail.gmail.com> <20060120154215.GA54284@dan.emsphone.com> <7daacbbe0601201008m7c650f4esedcd81921d0fd81e@mail.gmail.com> <20060120200149.GB54284@dan.emsphone.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--WKQ7zUpzoH2KEHMN Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Jan 20, 2006 at 02:01:49PM -0600, Dan Nelson wrote: > Two, something is calling nanosleep. It's probably nss_ldap, which > looks like if it can't contact any of the configured ldap servers, > waits 4 seconds, then retries, doubling the wait period every time > until 64 seconds have elapsed, then it fails. Try putting >=20 > nss_reconnect_tries 0 > nss_reconnect_maxconntries 0 >=20 > in your /usr/local/etc/nss_ldap.conf file. I've been struggling with similar issues where slapd seems to hang at startup when using nss_ldap on the local system (all system accounts and groups are local, yet the group enumeration seems to cause the hang). Are these two settings documented anywhere for reference? I'm trying to understand how this interact with 'bind_policy soft', which I've also seen recommended. The nss_* settings don't seem documented in the stock nss_ldap.conf.sample file. Thanks for the help. David --WKQ7zUpzoH2KEHMN Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- iEYEARECAAYFAkPWlHUACgkQlTJ+DI1JK1tRBQCeNoBBdS1c1K6nEo9unNd9XWmp EoQAnR7ZeXrea+hjuA6QCYX55vObWnQT =y0gQ -----END PGP SIGNATURE----- --WKQ7zUpzoH2KEHMN--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060124205621.GU69091>