Re: nss_ldap and openldap on the same server.

2007-03-13 Thread Gerhard Schmidt
On Tue, Mar 13, 2007 at 12:07:15AM +0100, Pietro Cerutti wrote: On 3/12/07, Gerhard Schmidt [EMAIL PROTECTED] wrote: Hi, Hello, As I see it, nss asks all sources even if the frist one allready knows the answer. Is there a way to change this. man nsswitch.conf(5) Look for Status codes

Re: nss_ldap and openldap on the same server.

2007-03-13 Thread Gerhard Schmidt
On Tue, Mar 13, 2007 at 07:58:05AM +0900, Daniel Marsh wrote: I've run into this very same problem... but the way I got around it was putting OpenLDAP in a jail all by its lonesome and making sure that jail would start before anything on the host system would start that may need LDAP...

Re: nss_ldap and openldap on the same server.

2007-03-13 Thread Jonathan McKeown
On Tuesday 13 March 2007 09:16, Gerhard Schmidt wrote: On Tue, Mar 13, 2007 at 12:07:15AM +0100, Pietro Cerutti wrote: On 3/12/07, Gerhard Schmidt [EMAIL PROTECTED] wrote: Hi, Hello, As I see it, nss asks all sources even if the frist one allready knows the answer. Is there a way

Re: nss_ldap and openldap on the same server.

2007-03-13 Thread Pietro Cerutti
On 3/13/07, Jonathan McKeown [EMAIL PROTECTED] wrote: The only ``workaround'' I've seen suggested is the parameter introduced recently in nss_ldap: nss_initgroups_ignoreusers Right, now I remember that once I had this problem too... Another workaround would be to have two different

Re: nss_ldap and openldap on the same server.

2007-03-13 Thread Joerg Pulz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 13 Mar 2007, Gerhard Schmidt wrote: On Tue, Mar 13, 2007 at 12:07:15AM +0100, Pietro Cerutti wrote: On 3/12/07, Gerhard Schmidt [EMAIL PROTECTED] wrote: Hi, Hello, As I see it, nss asks all sources even if the frist one allready knows

Re: nss_ldap and openldap on the same server.

2007-03-13 Thread Gerhard Schmidt
On Tue, Mar 13, 2007 at 10:01:09AM +0200, Jonathan McKeown wrote: On Tuesday 13 March 2007 09:16, Gerhard Schmidt wrote: On Tue, Mar 13, 2007 at 12:07:15AM +0100, Pietro Cerutti wrote: On 3/12/07, Gerhard Schmidt [EMAIL PROTECTED] wrote: Hi, Hello, As I see it, nss asks all

Re: nss_ldap and openldap on the same server.

2007-03-13 Thread Gerhard Schmidt
On Tue, Mar 13, 2007 at 09:08:34AM +0100, Joerg Pulz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 13 Mar 2007, Gerhard Schmidt wrote: On Tue, Mar 13, 2007 at 12:07:15AM +0100, Pietro Cerutti wrote: On 3/12/07, Gerhard Schmidt [EMAIL PROTECTED] wrote: Hi, Hello, As I

Re: nss_ldap and openldap on the same server.

2007-03-13 Thread Jonathan McKeown
On Tuesday 13 March 2007 10:26, Gerhard Schmidt wrote: It's a well-known problem rather than a bug, and it arises when looking up group information for a user. The system needs a list of all the groups the user is a member of. Since it's a list, not a single answer, you can't

Re: nss_ldap and openldap on the same server.

2007-03-13 Thread Gerhard Schmidt
On Tue, Mar 13, 2007 at 11:13:00AM +0200, Jonathan McKeown wrote: On Tuesday 13 March 2007 10:26, Gerhard Schmidt wrote: It's a well-known problem rather than a bug, and it arises when looking up group information for a user. The system needs a list of all the groups the user is a

Re: nss_ldap and openldap on the same server.

2007-03-13 Thread Jonathan McKeown
On Tuesday 13 March 2007 14:21, Gerhard Schmidt wrote: On Tue, Mar 13, 2007 at 11:13:00AM +0200, Jonathan McKeown wrote: On Tuesday 13 March 2007 10:26, Gerhard Schmidt wrote: [setting group: files ldap in nsswitch.conf] It looks as though you can instruct nss_ldap to unconditionally return

Re: nss_ldap and openldap on the same server.

2007-03-12 Thread Daniel Marsh
On 3/12/07, Gerhard Schmidt [EMAIL PROTECTED] wrote: Hi, I have a small problem. On my central server we run an openldap server that contains the userdata for some systems. An the server uses this ldap server for authentication and nss. The problem is that when the server is booting slapd

Re: nss_ldap and openldap on the same server.

2007-03-12 Thread Pietro Cerutti
On 3/12/07, Gerhard Schmidt [EMAIL PROTECTED] wrote: Hi, Hello, As I see it, nss asks all sources even if the frist one allready knows the answer. Is there a way to change this. man nsswitch.conf(5) Look for Status codes and Actions Bye Bye Estartu