Hi Stefano. > installed openldap and configured nslcd.conf and nsswitch.conf on debian > squeeze server.
Did you install nslcd by it self or in companion with libnss-ldapd and libpam-ldapd? How does your /etc/nsswitch.conf look like? Here are the relevant lines from mine: passwd: files ldap group: files ldap shadow: files ldap You need libnss-ldapd for the "ldap" rule in the lines above. > At the moment getent passwd doesn't show ldap user. > I create a user nslcd_proc for nslcd lookups. > this user belong to the System organizationalUnit. This is unnecessary, nslcd functions fine without a DN. > nslcd: [8b4567] DEBUG: > ldap_simple_bind_s("uid=nslcd_proc,ou=System,dc=amahoro,dc=bi","***") > (uri="ldap://localhost:389") > nslcd: [8b4567] ldap_result() failed: No such object Looks like LDAP can't find the DN in the repository. Can you log in manually as this user? server$ ldapsearch -xW -D "uid=nslcd_proc,ou=System,dc=amahoro,dc=bi" -H ldapi:/// > slapd.conf Do you have a slapd.conf? Have you compiled it from source or installed as a Debian package? server$ apt-cache policy slapd I've got: slapd: Installed: 2.4.23-7.2 Candidate: 2.4.23-7.2 Version table: *** 2.4.23-7.2 0 700 http://ftp.no.debian.org/debian/ squeeze/main amd64 Packages 100 /var/lib/dpkg/status AFAIK the openldap server (binary package is called slapd in Debian) packaged no longer use that file. Instead the config is stored in a LDAP repository (/etc/ldap/slapd.d) and modified by using LDIF-files. -- Pelle "D’ä e å, vett ja”, skrek ja, för ja ble rasen, ”å i åa ä e ö, hörer han lite, d’ä e å, å i åa ä e ö" - Gustav Fröding, 1895 -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CAOURYnDjhQpbrZFYd4urzp5ux8hHXHbaGB1XmCucNCw=jyc...@mail.gmail.com