Here is the config from /usr/share/base-files/nsswitch.conf. On my Machine run 
at this moment no ldap authentication.

# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.

passwd:         compat
group:          compat
shadow:         compat

hosts:          files dns
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis


And configured /etc/libnss-ldap.conf for LDAP authentication. My problem is an 
LDAP authentication, therefore I must change the file /etc/nsswitch.conf as 
usual for LDAP authentication. On my 1.st post, I just copied the changed 
section.

Here is libnss-ldap.conf without commented stuffs

base dc=skpcc,dc=org
uri ldaps://hera.skpcc.org:636/
ldap_version 3
rootbinddn cn=admin,dc=skpcc,dc=org
timelimit 5
bind_timelimit 5
bind_policy soft
pam_filter objectclass=posixAccount
pam_login_attribute uid
pam_min_uid 10000
pam_password exop
nss_base_passwd         ou=Users,dc=skpcc,dc=org?one
nss_base_passwd         ou=Computers,dc=skpcc,dc=org?one
nss_base_shadow         ou=Users,dc=skpcc,dc=org?one
nss_base_group          ou=Groups,dc=skpcc,dc=org?one
ssl on
tls_checkpeer yes
tls_cacertfile /etc/ldap/cacerts/ca.cert
tls_cert /etc/ldap/cacerts/client.cert
tls_key /etc/ldap/cacerts/client.key


And yes NetworkManager is installed on Clients.

On Debian Etch, my Debian can booting til ends and the client can log in to the 
system with LDAP account. The whole configuration is the same between etch and 
lenny.

I've found the same bug on ubuntu but I couldn't find the link now. The bug 
exists on 2006 or 2007.



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to