[olug] nss and pam ldap (fixed!)

[Daniel Pfile]

Well, after learning the inside/outside/backside/etc of nss, pam, ldap,
reading pam source code, etc. I've found the solution.

RESTART NSCD WHEN YOU CHANGE NSSWITCH.CONF

did everybody see that? nscd is the name service cache deamon. it caches
requests by the system to things like nis/ldap so it's not insanely
slow. The problem is, when you change nsswitch.conf to use ldap/nis, nscd
doesn't know that and happily continues to use the old system.

Once again, a really simple, but cryptic, non obvious fix. I'm going to
submit a bug report to the debian nscd maintainer about this. Nowhere
anywhere in anything was it mentioned nscd needs to be restarted to see
changes in nsswitch.conf, althought I should have realized it much much
sooner.

So I guess I can officially declare myself well versed in pam/nss now. :/

| Daniel Pfile        | I'm too cool for a signature |
| pfiled at marietta.edu |                              |


---------------------------------------------------------------------
To unsubscribe, e-mail: olug-unsubscribe at bstc.net
For additional commands, e-mail: olug-help at bstc.net