ISSUE RESOLVED

I didn't have nslcd started.

Thanks everybody for your help.

-----Original Message----- From: Dan White [mailto:dwhite@olp.net] Sent: Tuesday, March 12, 2013 11:07 AM To: Rodney Simioni Cc: openldap-technical@openldap.org Subject: Re: getent passwd inconsistent loginShell with ldapsearch

On 03/12/13 10:19 -0400, Rodney Simioni wrote:

I removed ldap from nsswitch.conf. I restarted slapd and sssd.

There is still inconsistencies between getent and ldapsearch:

[root@rodster sssd]# getent passwd meathead08 meathead08:*:343108:343108:Johnny Appleseed:/home/meathead08:/bin/noshell

ldapsearch -w xxxx -D "cn=manager,dc=wh,dc=local" homeDirectory: /home/meathead08 loginShell: /bin/bash

...

/etc/nsswitch.conf has:

passwd: files sss ldap shadow: files sss ldap

Your problem does not appear to be openldap related.

Try alternatively removing 'files' and 'sss' from your nsswitch.conf file, and then running getent again. If the problem persists in both scenarios, then you've got a caching issue. If the problem exists in only one of the cases, then you know who to blame.

-- Dan White

This email message is intended for the use of the person to whom it has been sent, and may contain information that is confidential or legally protected. If you are not the intended recipient or have received this message in error, you are not authorized to copy, distribute, or otherwise use this message or its attachments. Please notify the sender immediately by return e-mail and permanently delete this message and any attachments. Verio Inc. makes no warranty that this email is error or virus free. Thank you.