| View previous topic :: View next topic |
| Author |
Message |
Benny
n00b
Joined: 28 Oct 2002
Posts: 6
|
 Posted: Tue Jan 04, 2005 1:32 am Post subject: Strange nss ldap behaviour - UIDs and GIDs not mapping |
 |
|
I've got a setup where I have a master LDAP server and a replica LDAP server.
Using nss-ldap and pam-ldap my gentoo linux clients use the LDAP servers for authentication.
The strange behaviour I am seeing is that when using "ldapsearch" or "getent" all of the ldap entries are found correctly and ldap users are able to log in to the system okay.....HOWEVER, when doing something like an "ls -l" or "id username" none of the uid's or gid's are mapped correctly. Below is the output from various commands (bbirnbaum and the IT are ldap entries):
"getent passwd bbirnbaum"
| Code: |
bbirnbaum:x:1000:1000:Ben Birnbaum:/home/users/bbirnbaum:/bin/bash
|
"getent group IT"
"ls -l"
| Code: |
-rw-r--r-- 1 1000 1000 0 Jan 4 12:26 file1
-rw-r--r-- 1 1000 1000 0 Jan 4 12:26 file2
-rw-r--r-- 1 1000 1000 0 Jan 4 12:26 test
|
"id bbirnbaum"
| Code: |
uid=1000 gid=1000 groups=0(root),512
|
Below are snippits of my /etc/ldap.conf and /etc/nsswitch.conf (from the clients)..
ldap.conf
| Code: |
base dc=blah,dc=com
uri ldap://192.168.4.3/ ldap://192.168.15.36/
ldap_version 3
scope one
pam_filter objectclass=posixAccount
pam_login_attribute uid
pam_member_attribute memberuid
pam_password exop
nss_base_passwd ou=people,ou=melbourne,ou=australia,dc=blah,dc=com
nss_base_shadow ou=people,ou=melbourne,ou=australia,dc=blah,dc=com
nss_base_group ou=groups,ou=melbourne,ou=australia,dc=blah,dc=com
|
nsswitch.conf
| Code: |
passwd: files ldap
group: files ldap
hosts: files dns ldap
|
I'm really stumped on this one, any help would be appreciated - if more details are needed let me know.
Thanks guys.
Cheers
Benjamin |
|
| Back to top |
|
 |
UberLord
Retired Dev
Joined: 18 Sep 2003
Posts: 6835
Location: Blighty
|
| Posted: Tue Jan 04, 2005 12:20 pm Post subject: |
|
|
| Ensure that nscd is not running - or not caching passwd and group as that alls fuxors LDAP for me |
|
| Back to top |
|
|
Ferdy
Retired Dev
Joined: 04 May 2002
Posts: 483
Location: España
|
| Posted: Tue Jan 04, 2005 1:05 pm Post subject: |
|
|
IIRC you have to configure your pam_stack to use pam_ldap.o
At least works really well for me with around 100 machines and some replica servers.
PD: I *do* use nscd and haven't experienced any problems...
Cheers,
Ferdy
_________________
Paludis, the next generation in package mangling. |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
Networking & Security
