On Thu, 2010-05-27 at 19:20 +0200, Christian PERRIER wrote:
> First of all, let me add a disclaimer: I am *not* the maintainer of
> libnss-ldap nor do I have much clue about LDAP auth and even that
> package.

Let me then also add my comments (I'm also not the maintainer of
libnss-ldap but I'm the one for libnss-ldapd).

I think you should give libnss-ldapd a try, especially if you are using
SSL/TLS or Kerberos. That package does LDAP queries in a separate
process space and has a much more maintainable code base. It is also
available in lenny and should be very stable.

Anyway, going over the bugreport (and #541188) I find this a bit odd
(/etc/nsswitch.conf):

passwd:         files ldap [UNAVAIL=return]
group:          files ldap [UNAVAIL=return]

I think the expressions between brackets are only really useful between
different lookup methods. Another thing that could be causing it is
nscd. It has been known to give problems in some cases.

-- 
-- arthur - [email protected] - http://people.debian.org/~adejong --

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to