[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: slapd breaks NSS, NSS breaks slapd

To: guenther+ldapsoft@sendmail.com (Philip Guenther)
Subject: Re: slapd breaks NSS, NSS breaks slapd
From: manu@netbsd.org (Emmanuel Dreyfus)
Date: Mon, 11 Aug 2008 21:52:46 +0200
Cc: openldap-software <openldap-software@openldap.org>
In-reply-to: <alpine.BSO.1.10.0808111123340.4725@vanye.mho.net>
User-agent: MacSOUP/2.7 (unregistered for 570 days)

Philip Guenther <guenther+ldapsoft@sendmail.com> wrote:

> This sounds a bit like this thread:
>       http://www.openldap.org/lists/openldap-software/200804/msg00004.html
> 
> There were a couple suggestions there.

So here are the 3 solutions given in this thread:

- No problem with group resolution, it is defined locally
- I tried to add -g ldap, no improvement. I also tried -g <gid of ldap>
- bind_policy soft in /etc/nss_ldap.conf does not help either.

But the person that started that thread tracked the problem down to
group resolution. I tried with this in nss_ldap.conf
URI     ldap://localhost ldap://ldap.example.net

And this in /etc/nsswitch.conf:
group:          files
(instead of "files ldap") 

and I can get it starting.

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@netbsd.org

References:
- Re: slapd breaks NSS, NSS breaks slapd
  - From: Philip Guenther <guenther+ldapsoft@sendmail.com>

Prev by Date: Syncrepl replication with a non-slapd master?
Next by Date: Re: slapd breaks NSS, NSS breaks slapd
Index(es):
- Chronological
- Thread