Thank you for the link. The hot fixed worked! Though I am concerned
with the remark "though this is relaxed a bit in subsequent
versions to a minimum of two.". We allow for single character login
names.
On 1/9/12 3:08 PM, Kinzel, David wrote:
https://bugzilla.redhat.com/show_bug.cgi?id=706860 should cover this.
-----Original Message-----
From: [email protected]
[mailto:[email protected]] On
Behalf Of CJ Keist
Sent: Monday, January 09, 2012 2:09 PM
To: [email protected]
Subject: Possible bug in nslcd daemon
I have installed SL 6.1 On two different servers. One Installed back
2011 in Oct I believe, and second one last December. Anyway I think I
have run into a bug with ldap authentication.
On my newer SL server looks like the ldap client cannot retrieve any
accounts where the account name is shorter than 3 characters.
Where as
my older SL server can retrieve them just fine. I checked the version
of the nslcd daemon on both servers and they are both at:
nss-pam-ldapd 0.7.5
Written by Luke Howard and Arthur de Jong.
Copyright (C) 1997-2009 Luke Howard, Arthur de Jong and West Consulting
This is free software; see the source for copying conditions.
There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
But looking at the size of both the nslcd binaries, I found them to be
of different sizes:
-rwxr-xr-x. 1 root root 133560 Jan 9 09:35 nslcd (The older
SL server)
-rwxr-xr-x. 1 root root 138120 May 21 2011 nslcd.otw (The new
SL server)
Anyway I fixed my problem by copying the nslcd binary from the older
server to my newer one and now it can pick up the accounts with login
names shorter than 3 characters.
Funny thing is that I could create a local user account with a 2
character login name just fine with useradd. And getent passwd could
pull it up just fine. But if it's on ldap server it would not see the
account.
Anyone else seen this?
--
C. J. Keist Email: [email protected]
Systems Group Manager Solaris 10 OS (SAI)
Engineering Network Services Phone: 970-491-0630
College of Engineering, CSU Fax: 970-491-5569
Ft. Collins, CO 80523-1301
All I want is a chance to prove 'Money can't buy happiness'
This email communication and any files transmitted with it may contain
confidential and or proprietary information and is provided for the use of the
intended recipient only. Any review, retransmission or dissemination of this
information by anyone other than the intended recipient is prohibited. If you
receive this email in error, please contact the sender and delete this
communication and any copies immediately. Thank you.
http://www.encana.com
--
C. J. Keist Email: [email protected]
Systems Group Manager Solaris 10 OS (SAI)
Engineering Network Services Phone: 970-491-0630
College of Engineering, CSU Fax: 970-491-5569
Ft. Collins, CO 80523-1301
All I want is a chance to prove 'Money can't buy happiness'
