Re: Supplementary groups on LDAP cannot work with RELENG_8 +nss_ldap

2010-03-10 Thread Linghua Tseng
Have you tried with group: files ldap group_compat: nis passwd: files ldap passwd_compat: nis Yes, this setting works properly. Does it mean that I cannot put `ldap' into passwd_compat & group_compat? Sometimes I need the support of +/- in my passwd & group database. Was this feature gon

Re: Supplementary groups on LDAP cannot work with RELENG_8 +nss_ldap

2010-03-10 Thread Ricardo Campos Passanezi
On Wed, Mar 10, 2010 at 02:58:04PM +0800, Linghua Tseng wrote: > Thanks. > > I have tried to modify my /etc/nsswitch.conf to: > > group: compat > group_compat: ldap > hosts: files dns > networks: files > passwd: compat > passwd_compat: ldap > shells: files > services: compat > services_compat: ni

Re: Supplementary groups on LDAP cannot work with RELENG_8 +nss_ldap

2010-03-09 Thread Linghua Tseng
. -- From: "Greg Byshenk" Sent: Wednesday, March 10, 2010 3:11 AM To: "Linghua Tseng" Cc: "Peter C. Lai" ; Subject: Re: Supplementary groups on LDAP cannot work with RELENG_8 +nss_ldap On Tue, Mar 09, 2010 at 09:00:49AM +0800, Linghua Ts

Re: Supplementary groups on LDAP cannot work with RELENG_8 +nss_ldap

2010-03-09 Thread Greg Byshenk
On Tue, Mar 09, 2010 at 09:00:49AM +0800, Linghua Tseng wrote: > Here is the output of `diff -u /usr/src/etc/nsswitch.conf > /etc/nsswitch.conf'. > --- /usr/src/etc/nsswitch.conf 2010-03-08 09:04:25.0 +0800 > +++ /etc/nsswitch.conf 2010-03-08 18:01:08.0 +0800 > @@ -1,13 +1,13 @

Re: Supplementary groups on LDAP cannot work with RELENG_8 +nss_ldap

2010-03-08 Thread Linghua Tseng
3.html It says to set `bind_policy' to `hard' can resolve this issue, but it cannot work for me. -- From: "Peter C. Lai" Sent: Tuesday, March 09, 2010 8:08 AM To: "Ling-hua Tseng" Cc: Subject: Re: Supplementary groups

Re: Supplementary groups on LDAP cannot work with RELENG_8 + nss_ldap

2010-03-08 Thread Peter C. Lai
Unable to reproduce, at least on a brand new 8-R install. Did you make sure you correctly merged /etc/nsswitch.conf during mergemaster? On 2010-03-08 09:07:12PM +0800, Ling-hua Tseng wrote: > Today I upgraded 2 of my 4 machines from RELENG_7 to RELENG_8. > Both of the 2 machines are just LDAP clie

Supplementary groups on LDAP cannot work with RELENG_8 + nss_ldap

2010-03-08 Thread Ling-hua Tseng
Today I upgraded 2 of my 4 machines from RELENG_7 to RELENG_8. Both of the 2 machines are just LDAP clients. My LDAP server is still running on RELENG_7, and the remained one is also a LDAP client. All of them were installed OpenLDAP-2.4.21 and nss_ldap-1.265_3. Before I upgrades my system, everyt