Package: libnss-ldap
Version: 251-7.1
A missing call to service DNS in /etc/nsswitch.conf makes the nsswitch
system unuseable without error message, even if DNS is nor really needed.
My /etc/libnss-ldap.conf is
----cut----
uri ldaps://10.76.195.82 ldaps://10.76.192.88
tls_checkpeer yes
tls_cacert /etc/ssl/certs/cacert.pem
ldap_version 3
bind_policy hard
nss_reconnect_maxconntries 2
nss_reconnect_sleeptime 2
nss_reconnect_maxsleeptime 10
nss_reconnect_tries 2
base dc=ibw,dc=forst,dc=uni-goettingen,dc=de
pam_filter objectclass=posixAccount
pam_min_uid 10000
nss_base_passwd ou=Leute,dc=ibw,dc=forst,dc=uni-goettingen,dc=de?one
nss_base_shadow ou=Leute,dc=ibw,dc=forst,dc=uni-goettingen,dc=de?one
nss_base_passwd ou=HostIds,dc=ibw,dc=forst,dc=uni-goettingen,dc=de?one
nss_base_group ou=Gruppen,dc=ibw,dc=forst,dc=uni-goettingen,dc=de?one
nss_base_hosts ou=HostIds,dc=ibw,dc=forst,dc=uni-goettingen,dc=de?one
---cut---
My /etc/nsswitch.conf is
---cut---
passwd: files ldap
group: files ldap
shadow: files ldap
hosts: files ldap
networks: files
protocols: db files
services: db files
ethers: db files
rpc: db files
netgroup: nis
---cut---
If I call 'getent passwd' I get only the contents of the local
/etc/passwd file and the process __hangs indefinitely__. There is no
error message in syslog.
I would expect an error message at least. A configuration without DNS
seems not unreaonable to me. In fact, the present server is a printer
server. Nobody would need connections to the worldwide net from
here. LDAP should cope with the local IP addresses and the Addresses
of the LDAP servers are specified in numerical form anyway.
I found a workaround, after _long_ experimentation:
A line in /etc/nsswitch.conf reading
hosts: files dns ldap
resolves the problem.
Even
hosts: files
works.
So it is LDAP that needs DNS even with numerical URIs.
I am using debian 4.0,
kernel 2.6.18-3-486,
libc-2.3.6.so,
libldap-2.3.so.0.2.18, libldap_r.so.2.0.130, libldap.so.2.0.130
--
-------------------------------------------------------------------
Juergen Prenzel
Institut fuer Bodenkunde und Waldernaehrung
Buesgenweg 2
D-37077 Goettingen
Tel.: +49/551/39-12104 Fax: +49/551/39-3310 email: [EMAIL PROTECTED]
-------------------------------------------------------------------
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
