At Mon, 07 Feb 2011 10:40:28 +0100, Joël Cuissinat wrote: > Thank you for the advice, it works without patch if we remove the > objectClass filter in our /etc/ldap/ldap.conf > > The line was : > nss_base_passwd o=gouv,c=fr?sub?objectClass=shadowAccount > > This filter was added because we didn't want to have the stations listed > by the command : > getent passwd
Try the following: nss_base_passwd o=gouv,c=fr?sub?(&(objectClass=posixAccount)(!(uid=*$))) > Is there a way to have both the domain jonction OK and not the stations > listed by getent passwd ? Split LDAP DIT to ou=Users,o=gouv,c=fr for users and ou=Computers,o=gouv,c=fr for computers and use search base ou=Users,o=gouv,c=fr for the passwd lookup. > The pam.d files are the ones provided by Ubuntu 10.04 LTS excepted > common-password and login. -- -- Name: SATOH Fumiyasu (fumiyas @ osstech co jp) -- Business Home: http://www.OSSTech.co.jp/ -- Personal Home: http://www.SFO.jp/blog/ _______________________________________________ Smbldap-tools-tech mailing list [email protected] https://mail.gna.org/listinfo/smbldap-tools-tech
