Re: Issue with resolving groups with nss_ldap

On Friday 01 September 2006 09:19, Erik Logtenberg wrote:
> Hi,
[..]
> Ofcourse you already noticed that the test-user in this case is the
> 'ldap' user. This is because OpenLDAP runs as ldap user and ldap group.
> OpenLDAP can't start because nss_ldap tries to resolve the ldap user
> from LDAP first, before it can even start the OpenLDAP service.
>
> I hope someone can tell me if this is a configuration error on my side,
> or a bug in nss_ldap?

What did you set for bind_policy in your nss_ldap configuration? I think you 
need to set this to "soft" when using nss_ldap on the machine that is running 
the LDAP server.

> P.S. This is nss_ldap 249.

-- 
Ralf Haferkamp
SUSE LINUX Products GmbH, Maxfeldstrasse 5, D-90409 Nuernberg
T: +49-911-74053-0
F: +49-911-74053575 - Ralf.Haferkamp@xxxxxxxx