** Changed in: libnss-ldap (Ubuntu)
Status: New = Triaged
** Changed in: libnss-ldap (Ubuntu)
Importance: Undecided = Low
--
LDAP and AD connection problem with hardy
https://bugs.launchpad.net/bugs/227229
You received this bug notification because you are a member of Ubuntu
Server
Indeed, while writing the post, I didn't realize that these are
different packages.
libnss-ldap - NSS module for using LDAP as a naming service
libnss-ldapd - NSS module for using LDAP as a naming service
They look very similar, and probably I mixed up the two packages while
installing ldap
Intrepid has a different nss-ldap configuration than hardy.
There is a deamon nslcd in the package libnss-ldapd, which has its own
config file /etc/nss-ldapd.conf with a different syntax (not compatible
to Hardy's /etc/ldap.conf).
I use the following filter statement for the groups. I am not an
slithy, kunzol above is wrong: nss-ldapd is indeed available in 8.04,
but it is not default and does not supersede libnss-ldap. It is a
completely different package than libnss-ldap (although it fill the same
use-case). I understand this bug concern libnss-ldap, not libnss-
ldap*d*.
--
LDAP
Oh, I didn't realize he was talking about a different package.
--
LDAP and AD connection problem with hardy
https://bugs.launchpad.net/bugs/227229
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libnss-ldap in ubuntu.
--
I have encountered this bug as well.
First I ran into this bug on Hardy, which I built libnss-ldap from
source to solve it. Now I'm facing the same problem on Intrepid, so it
seems like something is up.
Looking at kunzol's fix, I am mapping the msSFU30GidNumber to gid as
well and making a
I confirm this one.
The problem is that even thought there is this line in the ldap.conf
nss_map_objectclass posixGroup group
It will still recognise the AD groups which are not POSIX one's. This will lead
it to error with the GID's.
I made my work-around with
nss_base_group
