On Mon, 2008-05-05 at 14:38 +0200, Petter Reinholdtsen wrote:
> I just tested the latest nss-ldapd package at the university, with
> OpenLDAP as the LDAP server.  My initial test show that 'group pre do
> not return the complete set of groups, while 'su - pre -c id' return
> all the users groups.  This is on Debian Etch using a backport
> (recompile) of nss-ldapd.  No idea what is going on, but there are a
> lot of reconnects and some 'error writing to client'.

The problem is most likely a group with a lot of members. The "error
writing to client" messages for a lookup of nslcd_group_bygid(300) are
"normal" with the chosen retry mechanism (the retry mechanism there just
breaks off the request to nslcd and tries again). The "error writing
to client" for the nslcd_group_all() seems to indicate that the buffer
on the receiving end is full.

Could you give the svn version a try? That one has much bigger buffers
that should hold up to about 150000 users per group.

Thanks.

-- 
-- arthur - [EMAIL PROTECTED] - http://people.debian.org/~adejong --

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to