Re: nsswitch.conf and openldap-server

Buchan Milne <[email protected]> Wed, 8 Feb 2006 12:04:26 +0200
Newsgroups gmane.linux.mandrake.server
Message-ID <[email protected]>
--nextPart1422516.llU96ZCHyf
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Wednesday 08 February 2006 11:29, Frederic Bongat wrote:
> Hi,
>
> I use Mandriva 2006 with ldap server (openldap-servers-2.3.6-4mdk)
> I configure pam_ldap and nss_ldap on this server too  (pam_ldap-180-2mdk
> and nss_ldap-239-3.1.20060mdk)
>
> It wors nice, then I enable the client by configuring the file
> nsswitch.conf
>
> passwd:     files ldap
> shadow:     files ldap
> group:      files ldap
>
> It works again !
>
> and I reboot just afterwards, I have a problem during the sequence of
> starting
> The PC remains very a long time blocked on "mount sysfs in /sys"
> Then, I have 3 messages "/dev/mem, no such file or directory"
> A lot of process don't work (I cannot connect by ssh by sample : stdin:
> is not a tty)
> by removing words "ldap" from file nsswitch.conf and starts again all
> becomes again normal.
>
> passwd:     files
> shadow:     files
> group:      files
>
> I have to test that on 2 differents servers (with different hardware)
> and on a basic configuration of openldap too (just after an
> installation) and I have same the problems
>
> Would somebody have an idea?


Any machine which may lose access to its LDAP server should have something=
=20
like this in /etc/ldap.conf:

timelimit 5
bind_timelimit 5

(to allow local users to log in if the LDAP server is not available)

Whether this should affect udev so badly is another question (IMHO the mach=
ine=20
should at least be able to boot without these set ...)

Regards,
Buchan

=2D-=20
Buchan Milne
B.Eng,RHCE(803004789010797),LPIC-2(LPI000074592)

--nextPart1422516.llU96ZCHyf
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQBD6cI2rJK6UGDSBKcRAsCIAJwKNfcTlqgKBdt9XS36G2Vuh3tafwCglTzO
9h4sN47H0eGZK8WpOGdIshw=
=j5vB
-----END PGP SIGNATURE-----

--nextPart1422516.llU96ZCHyf--