ports/91806 : net/nss_ldap broken with getpwuid*

[Sean McNeil]

The following reply was made to PR ports/91806; it has been noted by GNATS.

From: Sean McNeil <sean at mcneil.com>
To: Artem Kazakov <kazakov at gmail.com>
Cc: bug-followup at FreeBSD.org
Subject: Re: ports/91806 : net/nss_ldap broken with getpwuid*
Date: Wed, 10 May 2006 23:01:23 -0700

 On Thu, 2006-05-11 at 14:15 +0900, Artem Kazakov wrote:
 > Hello! 
 > 
 > Sean McNeil <sean at mcneil.com>:
 > > Recent update of nss_ldap breaks getpwuid* routines.  This is evident with sshd.  Attempting to
 > > 
 > > ssh localhost
 > > Password:
 > > Connection to localhost closed by remote host.
 > > Connection to localhost closed.
 > > 
 > > sshd[]: nss_ldap: could not search LDAP server - Server is unavailable
 > > sshd[]: fatal: login_get_lastlog: Cannot find account for uid 501
 > > 
 > > Reverting to previous version fixes the problem.
 > 
 > Could you please check your nss_ldap.conf file? 
 > It looks like, if you set 
 > bind_policy soft
 > nss_ldap stops working. I do not know the details yet, but I faced the same problem. 
 > If you change bind_poicy to hard (as it is by default) everything should work. 
 
 Indeed, this is exactly the problem I have.  Commenting out my setting
 of "bind_policy soft" allows ssh to function once again.
 
 Thanks,
 Sean