I disabled nscd. Here's my ldap.conf
#SIZELIMIT 12 #TIMELIMIT 15 #DEREF never TLS_CACERTDIR /etc/openldap/cacerts #URI ldap://127.0.0.1/ URI ldap://127.0.0.1/ BASE dc=wh,dc=local port 389
It's still inconsistent.
-----Original Message----- From: openldap-technical-bounces@OpenLDAP.org [mailto:openldap-technical-bounces@OpenLDAP.org] On Behalf Of Liam Gretton Sent: Monday, March 11, 2013 5:42 AM To: openldap-technical@openldap.org Subject: Re: getent passwd inconsistent loginShell with ldapsearch
On 08/03/2013 21:41, Rodney Simioni wrote:
That didn’t fix it, getent and ldapsearch is still inconsistent.
Firstly, switch off nscd altogether when tracking down these problems, it will only get in the way and cause confusion.
As there's a mismatch between the user's shell in the two outputs, and assuming that your ldapsearch is definitely querying what ldap.conf is configured to look at, then I'd guess that you have an entry for this user in /etc/passwd.