ldap configuration
I'm wanting to use ldap in compatibility mode for password and group.
I am on Solaris 10
My nsswitch.conf:
passwd_compat: ldap
group_compat: ldap
group:compat
passwd:compat
shadow:compat
getent group cc-installerproperly displays the group members
getent passwd user does NOT display the user
The user is a member of the group cc-installer.
I have the following line in /etc/passwd
+@cc-installer::::::/bin/bash
and a similar entry in /etc/shadow
+@cc-installer::::::::
If I specify the user and have +user::::::/bin/bash the getent passwd user command properly displays the user.
Can we no longer include groups in the password file? If this can still be done, what am I doing wrong and/or how is it done?
It used to be done as above +@group
Thanks,
Kathy Whyte
# 1
> group:compat
> passwd:compat
> shadow:compat
>
> getent group cc-installerproperly displays the
> group members
> getent passwd user does NOT display the user
> The user is a member of the group cc-installer.
>
> I have the following line in /etc/passwd
> +@cc-installer::::::/bin/bash
> and a similar entry in /etc/shadow
> +@cc-installer::::::::
The lines in /etc/passwd should not contain 'groups' but 'netgroups'. You've mentioned nothing about whether or not you have a cc-installer netgroup with the users populated in it.
> If I specify the user and have +user::::::/bin/bash
> the getent passwd user command properly displays the
> user.
>
> Can we no longer include groups in the password file?
You never could. You could specify *netgroups*.
> If this can still be done, what am I doing wrong
> and/or how is it done?
>
> It used to be done as above +@group
Nope.
--
Darren