Why not have /etc/group be authoritive for wheel (an thus have a list of local superusers).
And use sudo with an ldap based group for everything else.

René

On Sat, 24 Sep 2011 14:03:32 +0200, Dag-Erling Smørgrav wrote:
Lev Serebryakov <[email protected]> writes:
Dag-Erling <[email protected]> writes:
> Did you try changing the priority in /etc/nsswitch.conf?
It gives very long boot time, as nss_ldap waits for answer from
non-started server, again and again, etc.

The only solution I can think of is to try to figure out how to reduce
or eliminate this delay, because the system is doing exactly what you
asked it to, i.e. treating /etc/group as authoritative and using LDAP
only for groups it can't find there.

DES

--
René de Vries
[email protected]
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[email protected]"

Reply via email to