Re: getent passwd inconsistent loginShell with ldapsearch

[Dan White <dwhite@olp.net>]

On 03/08/13 17:06 -0500, Rodney Simioni wrote:
> -----Original Message-----
> From: Dan White [mailto:dwhite@olp.net]
> Sent: Friday, March 08, 2013 4:49 PM
> To: Rodney Simioni
> Cc: openldap-technical@openldap.org
> Subject: Re: getent passwd inconsistent loginShell with ldapsearch
>
> > On 03/08/13 16:14 -0500, Rodney Simioni wrote:
> > > When I do a 'getent check72 passwd' I get:
> > >
> > > check72:*:6072:6072:Johnny Appleseed:/home/check72:/bin/bash
> >
> > What do you expect to see here?
>
> check72:*:6072:6072:Johnny Appleseed:/home/check72:/bin/noshell

Consult the documentation or mailing list of your nss ldap module.

> > > But when I do a ldapsearch command I get:
> > >
> > > # check72, people, wh.local
> > > dn: uid=check72,ou=people,dc=wh,dc=local
> > > uid: check72
> > > cn: Johnny Appleseed
> > > objectClass: account
> > > objectClass: posixAccount
> > > objectClass: top
> > > objectClass: shadowAccount
> > > userPassword:: e1NTSEF9OWVHdTdPVHIwVE15ajNQNEphdG9GR1cwZnQxa2Ftb3k=
> > > shadowLastChange: 15140
> > > shadowMax: 99999
> > > shadowWarning: 7
> > > uidNumber: 6072
> > > gidNumber: 6072
> > > homeDirectory: /home/check72
> > > loginShell: /bin/noshell

> > Are you sure that 'check72' does not exist in /etc/passwd (or another nss plugin)?
>
> I'm sure it does not exist in /etc/passwd

--
Dan White