nss_ldap and openldap on the same server.

[Pietro Cerutti]

On 3/13/07, Jonathan McKeown <jonathan at hst.org.za> wrote:
>
> The only ``workaround'' I've seen suggested is the parameter introduced
> recently in nss_ldap:
>
> nss_initgroups_ignoreusers

Right, now I remember that once I had this problem too...
Another workaround would be to have two different nsswitch.conf files,
one with and another without the ldap database entry, and then switch
between them as part of ldap start / stop routines.

- your system has the nsswitch.conf w/out ldap by default
- when ldap starts, it substitutes it with the nsswitch.ch file w/ ldap entries
- when ldap stops, it restores the original file

> Jonathan


-- 
Pietro Cerutti

- ASCII Ribbon Campaign -
 against HTML e-mail and
 proprietary attachments
   www.asciiribbon.org