nsswitch.conf confusion

[Brian Fahrlander]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Fajar Priyanto wrote:
> On Thursday 06 September 2007 09:31:47 Brian Fahrlander wrote:
>>   You also have a line in your file I don't- about 'shadow'...mine is
>> just like passwd and group: "ldap files".  Maybe you forgot to edit it?
> 
> I change it to 'files ldap' and now I can logon, but after an awful long time 
> (around 30 minutes). Does the sequence matter? Like 'ldap files' vs 'files 
> ldap'

   Yes, a bit; it expresses the order in which to search. "ldap files"
will search ldap, and delay if it's having trouble, THEN look at the
local files.

   This arrangement works for me, partly because I've shortened the
timeouts in /etc/libpam.conf and /etc/libnss.conf (or whichever files
those are; I don't remember the exact names just now.)

    Check with the Howto on the community documentation; I think it's
"LdapClientAuth" or such- the details are there.

- --
 ------------------------------------------------------------------------
 Brian Fahrländer                 Christian, Conservative, and Technomad
 Evansville, IN                              http://Fahrlander.net/brian
 ICQ: 5119262                         AOL/Yahoo/GoogleTalk: WheelDweller
 ------------------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFG3/NX6PLtRzZbdhYRAsZQAJ0cR3AJz8XOCAPB5EWanaOLQO/avACdEiuZ
Awve73n6se2w+GMS3iGruZI=
=MF0O
-----END PGP SIGNATURE-----