Re: LDAP authentication + Configuring PAM

2019-09-03 Thread Ludovic Courtès
Hi! Ricardo Wurmus skribis: >> Ricardo Wurmus skribis: [...] >>> I worked around this (by lowering the G-expression first), but it’s >>> ugly. And even then I still have the problem that I can’t control the >>> order of PAM entries at all. >> >> Perhaps we could add a field in that would be

Re: LDAP authentication + Configuring PAM

2019-08-23 Thread Ricardo Wurmus
Hi Ludo, > Ricardo Wurmus skribis: > >> My findings so far: >> >> * NSCD *must* be extended with caches for “passwd” and “group” >> databases or else applications will make the lookup for user accounts >> directly and will not consult LDAP at all. > > Nscd already has caches for those in ou

Re: LDAP authentication + Configuring PAM

2019-08-23 Thread Ludovic Courtès
Heya! Ricardo Wurmus skribis: > My findings so far: > > * NSCD *must* be extended with caches for “passwd” and “group” > databases or else applications will make the lookup for user accounts > directly and will not consult LDAP at all. Nscd already has caches for those in our default config

LDAP authentication + Configuring PAM

2019-08-22 Thread Ricardo Wurmus
Hi Guix, in the past few days I’ve been playing on and off with configuring a Guix System where accounts are authenticated against Active Directory via LDAP. My findings so far: * NSCD *must* be extended with caches for “passwd” and “group” databases or else applications will make the lookup f