On Fri, Mar 25, 2011 at 10:23 AM, Marco Pizzoli <span dir="ltr">&lt;<a href="mailto:marco.pizzoli@gmail.com">marco.pizzoli@gmail.com</a>&gt;</span> wrote:<br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Hi,<br>I could be corrected if I&#39;m wrong, but this problem is not related to OpenLDAP. It&#39;s a nss_ldap problem.<br>nss_ldap is a client library that&#39;s used by linux vendors to achieves seamless integration of users against *a* LDAP server.<br>


<br>I had a similar problem with a complex configuration and bypassed (not solved) the problem by modifying my client configuration.<br><br>I reduced the number of ldap server configured to be accessed: from 4 to 3.<br>I reduced the number of users defined in <b>nss_initgroups_ignoreusers</b> directive: i had about 40 listed in it...<br>


<br>Etc...<br><br>Make some tries and tell me if you can solve it.<br><br>Marco<div><div></div><div class="h5"><br><br><br><div class="gmail_quote">On Thu, Mar 24, 2011 at 9:25 PM, Srivatsav M <span dir="ltr">&lt;<a href="mailto:srivatsav.mudumba@gmail.com" target="_blank">srivatsav.mudumba@gmail.com</a>&gt;</span> wrote:<br>


<blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204, 204, 204);padding-left:1ex"><span style="border-collapse:separate;color:rgb(0, 0, 0);font-family:&#39;Times New Roman&#39;;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;font-size:medium"><span style="border-collapse:collapse;font-family:arial,sans-serif;font-size:13px">Hi,<br>



<br>We are using OpenLDAP for authenticating users registered in a LDAP server (Open LDAP, Active Directory). After adding 8 principals (/etc/ldap.conf), none of the users registered in the /etc/ldap.conf file are able to login. <br>



<br>nss_base_passwd OU=engg,DC=mycompany,DC=region,DC=someplace,DC=myarea,DC=compname,DC=parentcompname<br></span></span><span style="border-collapse:separate;color:rgb(0, 0, 0);font-family:&#39;Times New Roman&#39;;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;font-size:medium"><span style="border-collapse:collapse;font-family:arial,sans-serif;font-size:13px">nss_base_shadow </span></span><span style="border-collapse:separate;color:rgb(0, 0, 0);font-family:&#39;Times New Roman&#39;;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;font-size:medium"><span style="border-collapse:collapse;font-family:arial,sans-serif;font-size:13px">OU=engg,DC=mycompany,DC=region,DC=someplace,DC=myarea,DC=compname,DC=parentcompname<br>



nss_base_group </span></span><span style="border-collapse:separate;color:rgb(0, 0, 0);font-family:&#39;Times New Roman&#39;;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;font-size:medium"><span style="border-collapse:collapse;font-family:arial,sans-serif;font-size:13px">OU=engg,DC=mycompany,DC=region,DC=someplace,DC=myarea,DC=compname,DC=parentcompname</span></span><br>



<br><span style="border-collapse:separate;color:rgb(0, 0, 0);font-family:&#39;Times New Roman&#39;;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;font-size:medium"><span style="border-collapse:collapse;font-family:arial,sans-serif;font-size:13px"><br>



Can you please share the reason for this 7 limitation in the open ldap library. or how I can fix this issue. I am looking i for the header file in the source files whhich has this constant or limitation defined.<br><br> Tried googling, but it appears that no one has encountered this issue. Some customers are running into this issue and it has become a severity 1 issue to fix.<br>



<br>Thanks<br>Ramakanth<br></span></span>
</blockquote></div><br><br clear="all"><br></div></div></blockquote><div><br><br></div></div>Hi all,<br><br>Have you tried with &quot;nss-ldapd&quot; [1] [2], a fork from NSS LDAP Package from PADL Software Pty Ltd.?<br>
<br>[1] <a href="http://arthurdejong.org/nss-pam-ldapd/">http://arthurdejong.org/nss-pam-ldapd/</a><br>[2] <a href="http://packages.debian.org/squeeze/libnss-ldapd">http://packages.debian.org/squeeze/libnss-ldapd</a><br>