LDAP-nss - was unwanted loading of libnss_nis.so in etch

2007-02-19 Thread Russell Coker
On Monday 19 February 2007 02:52, Petter Reinholdtsen <[EMAIL PROTECTED]> wrote: > > Can't you change the timeout? According to the comment in my > > libnss-ldap you can: > > Sure. But reducing it to a value where it is usable would render the > timeout useless. It would have to be <5 seconds, an

Re: unwanted loading of libnss_nis.so in etch

2007-02-18 Thread Petter Reinholdtsen
[Brian May] > Can't you change the timeout? According to the comment in my > libnss-ldap you can: Sure. But reducing it to a value where it is usable would render the timeout useless. It would have to be <5 seconds, and that almost equivalent to connecting to all the servers at once and picking

Re: unwanted loading of libnss_nis.so in etch

2007-02-16 Thread Brian May
> "Petter" == Petter Reinholdtsen <[EMAIL PROTECTED]> writes: Petter> Nope, not even in theory. Sequencial 3 minute timeout per server is Petter> not client side failover. It is just painful and useless. :) Can't you change the timeout? According to the comment in my libnss-ldap you

Re: unwanted loading of libnss_nis.so in etch

2007-02-16 Thread Gabor Gombas
On Fri, Feb 16, 2007 at 02:30:48PM +, Mark Brown wrote: > This is a reason why one might prefer files over compat, not a reason > why one would prefer compat over the NIS module. If you're using NIS but do not explicitely require plus addressing then the compat module is still a completely un

Re: unwanted loading of libnss_nis.so in etch

2007-02-16 Thread Mark Brown
On Fri, Feb 16, 2007 at 12:08:59PM +0100, Gabor Gombas wrote: > On Fri, Feb 16, 2007 at 09:42:20AM +, Mark Brown wrote: > > Why do you say it is considered obsolete (beyond the whole "being NIS" > > thing)? It gives slightly more control than using the NSS module > > directly. > Because it us

Re: unwanted loading of libnss_nis.so in etch

2007-02-16 Thread Petter Reinholdtsen
[Gabor Gombas] > In theory, it has, you can specify multiple server URIs in the > config file. In practice the OpenLDAP client libraries do not handle > failover very well (at least not in the past, things may have > changed). Nope, not even in theory. Sequencial 3 minute timeout per server is no

Re: unwanted loading of libnss_nis.so in etch

2007-02-16 Thread Gabor Gombas
On Fri, Feb 16, 2007 at 11:54:59AM +0100, Petter Reinholdtsen wrote: > If only LDAP had client side server failover like NIS. In theory, it has, you can specify multiple server URIs in the config file. In practice the OpenLDAP client libraries do not handle failover very well (at least not in the

Re: unwanted loading of libnss_nis.so in etch

2007-02-16 Thread Gabor Gombas
On Fri, Feb 16, 2007 at 09:42:20AM +, Mark Brown wrote: > Why do you say it is considered obsolete (beyond the whole "being NIS" > thing)? It gives slightly more control than using the NSS module > directly. Because it uses NIS even if you are not aware of it thus wasting memory in _every_ ru

Re: unwanted loading of libnss_nis.so in etch

2007-02-16 Thread Petter Reinholdtsen
[Brian May] > My understanding is that compat is mode to allow the +/- syntax which > is considered obsolete these days... We use NIS and the compat module here at the University of Oslo on most of our 2000 unix machines, so I can assure you that it is in active use and not obsolete at all. :) I

Re: unwanted loading of libnss_nis.so in etch

2007-02-16 Thread Mark Brown
On Fri, Feb 16, 2007 at 10:52:10AM +1100, Brian May wrote: > My understanding is that compat is mode to allow the +/- syntax which > is considered obsolete these days... Why do you say it is considered obsolete (beyond the whole "being NIS" thing)? It gives slightly more control than using the N

Re: unwanted loading of libnss_nis.so in etch

2007-02-15 Thread Brian May
> "Steve" == Steve Langasek <[EMAIL PROTECTED]> writes: Steve> Because that's what it means when you use 'compat' instead Steve> of 'files', support for NIS netgroups in /etc/passwd and Steve> friends. C.f. nsswitch.conf(5) for the details. Steve> IIRC this is the default in

Re: unwanted loading of libnss_nis.so in etch

2007-02-15 Thread Petter Reinholdtsen
[Steve Langasek] > Because that's what it means when you use 'compat' instead of > 'files', support for NIS netgroups in /etc/passwd and friends. > C.f. nsswitch.conf(5) for the details. You can control the compat module using passwd_compat etc settings. By default it is set to nis, but you can u

Re: unwanted loading of libnss_nis.so in etch

2007-02-15 Thread Steve Langasek
On Thu, Feb 15, 2007 at 10:03:09AM +1100, Russell Coker wrote: > open("/lib/tls/i686/cmov/libnss_nis.so.2", O_RDONLY) = 4 > Below is the contents of my /etc/nsswitch.conf. This should mean that > libnss-nis.so is not loaded, however an strace of "ls -l" shows the above > line (an strace of "ls"

unwanted loading of libnss_nis.so in etch

2007-02-15 Thread Russell Coker
open("/lib/tls/i686/cmov/libnss_nis.so.2", O_RDONLY) = 4 Below is the contents of my /etc/nsswitch.conf. This should mean that libnss-nis.so is not loaded, however an strace of "ls -l" shows the above line (an strace of "ls" with no parameters doesn't). Why would libnss_nis.so be loaded? When