ldap configuration

I'm wanting to use ldap in compatibility mode for password and group.

I am on Solaris 10

My nsswitch.conf:

passwd_compat: ldap

group_compat: ldap

group:compat

passwd:compat

shadow:compat

getent group cc-installerproperly displays the group members

getent passwd user does NOT display the user

The user is a member of the group cc-installer.

I have the following line in /etc/passwd

+@cc-installer::::::/bin/bash

and a similar entry in /etc/shadow

+@cc-installer::::::::

If I specify the user and have +user::::::/bin/bash the getent passwd user command properly displays the user.

Can we no longer include groups in the password file? If this can still be done, what am I doing wrong and/or how is it done?

It used to be done as above +@group

Thanks,

Kathy Whyte

[884 byte] By [kathy-whyte] at [2007-11-26 6:36:14]
# 1

> group:compat

> passwd:compat

> shadow:compat

>

> getent group cc-installerproperly displays the

> group members

> getent passwd user does NOT display the user

> The user is a member of the group cc-installer.

>

> I have the following line in /etc/passwd

> +@cc-installer::::::/bin/bash

> and a similar entry in /etc/shadow

> +@cc-installer::::::::

The lines in /etc/passwd should not contain 'groups' but 'netgroups'. You've mentioned nothing about whether or not you have a cc-installer netgroup with the users populated in it.

> If I specify the user and have +user::::::/bin/bash

> the getent passwd user command properly displays the

> user.

>

> Can we no longer include groups in the password file?

You never could. You could specify *netgroups*.

> If this can still be done, what am I doing wrong

> and/or how is it done?

>

> It used to be done as above +@group

Nope.

--

Darren

Darren_Dunham at 2007-7-6 14:44:37 > top of Java-index,General,Installation...