hi, i started to work with posixAccount objectClass. i installed libnss-ldap on debian squeeze server. i configured it during install time and i modified nsswitch.conf as follow: passwd files ldap group files ldap shadow files ldap and i didn't modify the remains lines. i succesfully added a structure.ldif file as follow #the root of the directory dn: dc=amahoro,dc=bi dc: amahoro o: amahoro.bi objectClass: top objectClass: dcObject objectClass: organization #subtree for the administrators dn: cn=Administrators,dc=amahoro,dc=bi cn: Administrators gidNumber: 100 objectClass: posixGroup i succesfully added a administrators.ldif file as follow: #Stefano Malini dn: uid=name,cn=Administrators,dc=amahoro,dc=bi cn: Administrators uid: name uidNumber: 100 gidNumber:100 homeDirectory: /home/name/ #Name info cn: Name Surname sn: Surname givenName: Name displayName: Name Surname #Work info title: System Administrator mail: address@mail #Misc userPassword: {SSHA}vB/RyxNdsVkwc9dDxEuS/sIGESBAkzTw objectClass: posixAccount objectClass: inetOrgPerson Now, with getent command-line there is not this user. Why?

Hi, have you tried using ldapsearch to see if its an issue with nss/pam or an issue with ldap? I would suggest that your openldap environment is probably working fine (as you seem to have been able to perform the necessary ldapadds) and its probably nss/pam that need fixing. Try reading here: http://wiki.debian.org/LDAP/NSS http://wiki.debian.org/LDAP/PAM Adam. On 29/02/12 20:50, stefano wrote: > hi, > > i started to work with posixAccount objectClass. > > i installed libnss-ldap on debian squeeze server. i configured it during > install time and i modified nsswitch.conf as follow: > > passwd files ldap > group files ldap > shadow files ldap > > and i didn't modify the remains lines. > > i succesfully added a structure.ldif file as follow > > #the root of the directory > dn: dc=amahoro,dc=bi > dc: amahoro > o: amahoro.bi > objectClass: top > objectClass: dcObject > objectClass: organization > > #subtree for the administrators > dn: cn=Administrators,dc=amahoro,dc=bi > cn: Administrators > gidNumber: 100 > objectClass: posixGroup > > i succesfully added a administrators.ldif file as follow: > > #Stefano Malini > dn: uid=name,cn=Administrators,dc=amahoro,dc=bi > cn: Administrators > uid: name > uidNumber: 100 > gidNumber:100 > homeDirectory: /home/name/ > #Name info > cn: Name Surname > sn: Surname > givenName: Name > displayName: Name Surname > #Work info > title: System Administrator > mail: address@mail > #Misc > userPassword: {SSHA}vB/RyxNdsVkwc9dDxEuS/sIGESBAkzTw > objectClass: posixAccount > objectClass: inetOrgPerson > > Now, with getent command-line there is not this user. Why? > > > > >

nobody knows something? On 02/29/2012 04:21 PM, stefano wrote: > am sorry, i confused DB_CONFIG with /etc/default/slapd and i > re-installed everything. > > i follow the steps on > http://wiki.debian.org/LDAP/NSS - NSS Setup with libnss-ldapd > but i can't see the new user posixAccount with getent passwd command > again. > the list is the same of /etc/passwd > > what is happened? > > > > > > > > On 02/29/2012 11:55 AM, Adam wrote: >> Hi, have you tried using ldapsearch to see if its an issue with nss/pam >> or an issue with ldap? >> >> I would suggest that your openldap environment is probably working fine >> (as you seem to have been able to perform the necessary ldapadds) and >> its probably nss/pam that need fixing. >> >> Try reading here: >> >> http://wiki.debian.org/LDAP/NSS >> http://wiki.debian.org/LDAP/PAM >> >> Adam. >> >> On 29/02/12 20:50, stefano wrote: >>> hi, >>> >>> i started to work with posixAccount objectClass. >>> >>> i installed libnss-ldap on debian squeeze server. i configured it during >>> install time and i modified nsswitch.conf as follow: >>> >>> passwd files ldap >>> group files ldap >>> shadow files ldap >>> >>> and i didn't modify the remains lines. >>> >>> i succesfully added a structure.ldif file as follow >>> >>> #the root of the directory >>> dn: dc=amahoro,dc=bi >>> dc: amahoro >>> o: amahoro.bi >>> objectClass: top >>> objectClass: dcObject >>> objectClass: organization >>> >>> #subtree for the administrators >>> dn: cn=Administrators,dc=amahoro,dc=bi >>> cn: Administrators >>> gidNumber: 100 >>> objectClass: posixGroup >>> >>> i succesfully added a administrators.ldif file as follow: >>> >>> #Stefano Malini >>> dn: uid=name,cn=Administrators,dc=amahoro,dc=bi >>> cn: Administrators >>> uid: name >>> uidNumber: 100 >>> gidNumber:100 >>> homeDirectory: /home/name/ >>> #Name info >>> cn: Name Surname >>> sn: Surname >>> givenName: Name >>> displayName: Name Surname >>> #Work info >>> title: System Administrator >>> mail: address@mail >>> #Misc >>> userPassword: {SSHA}vB/RyxNdsVkwc9dDxEuS/sIGESBAkzTw >>> objectClass: posixAccount >>> objectClass: inetOrgPerson >>> >>> Now, with getent command-line there is not this user. Why? >>> >>> >>> >>> >>> >

please, ideas, suggestions?

On 03/01/2012 03:23 PM, stefano wrote: > hi, > > i tried to use libnss-ldap and now i can see the users and group added to > ldap directory. > > a question: > launching the command > > nslcd - d this is the output: > > nslcd: Warning: /lib/libnss_ldap.so.2: undefined symbol: > _nss_ldap_enablelookups (probably older NSS module loaded) > nslcd: DEBUG: add_uri(ldap://localhost) > nslcd: version 0.7.15 starting > nslcd: DEBUG: unlink() of /var/run/nslcd/socket failed (ignored): No such > file or directory > nslcd: DEBUG: setgroups(0,NULL) done > nslcd: DEBUG: setgid(110) done > nslcd: DEBUG: setuid(107) done > nslcd: accepting connections > > what do you think about next lines? > > nslcd: Warning: /lib/libnss_ldap.so.2: undefined symbol: > _nss_ldap_enablelookups (probably older NSS module loaded) > ... > nslcd: DEBUG: unlink() of /var/run/nslcd/socket failed (ignored): No such > file or directory > > > > On 03/01/2012 08:25 AM, stefano wrote: >> nobody knows something? >> >> On 02/29/2012 04:21 PM, stefano wrote: >>> am sorry, i confused DB_CONFIG with /etc/default/slapd and i re-installed >>> everything. >>> >>> i follow the steps on >>> http://wiki.debian.org/LDAP/NSS - NSS Setup with libnss-ldapd >>> but i can't see the new user posixAccount with getent passwd command again. >>> the list is the same of /etc/passwd >>> >>> what is happened? >>> >>> >>> >>> >>> >>> >>> >>> On 02/29/2012 11:55 AM, Adam wrote: >>>> Hi, have you tried using ldapsearch to see if its an issue with nss/pam >>>> or an issue with ldap? >>>> >>>> I would suggest that your openldap environment is probably working fine >>>> (as you seem to have been able to perform the necessary ldapadds) and >>>> its probably nss/pam that need fixing. >>>> >>>> Try reading here: >>>> >>>> http://wiki.debian.org/LDAP/NSS >>>> http://wiki.debian.org/LDAP/PAM >>>> >>>> Adam. >>>> >>>> On 29/02/12 20:50, stefano wrote: >>>>> hi, >>>>> >>>>> i started to work with posixAccount objectClass. >>>>> >>>>> i installed libnss-ldap on debian squeeze server. i configured it during >>>>> install time and i modified nsswitch.conf as follow: >>>>> >>>>> passwd files ldap >>>>> group files ldap >>>>> shadow files ldap >>>>> >>>>> and i didn't modify the remains lines. >>>>> >>>>> i succesfully added a structure.ldif file as follow >>>>> >>>>> #the root of the directory >>>>> dn: dc=amahoro,dc=bi >>>>> dc: amahoro >>>>> o: amahoro.bi >>>>> objectClass: top >>>>> objectClass: dcObject >>>>> objectClass: organization >>>>> >>>>> #subtree for the administrators >>>>> dn: cn=Administrators,dc=amahoro,dc=bi >>>>> cn: Administrators >>>>> gidNumber: 100 >>>>> objectClass: posixGroup >>>>> >>>>> i succesfully added a administrators.ldif file as follow: >>>>> >>>>> #Stefano Malini >>>>> dn: uid=name,cn=Administrators,dc=amahoro,dc=bi >>>>> cn: Administrators >>>>> uid: name >>>>> uidNumber: 100 >>>>> gidNumber:100 >>>>> homeDirectory: /home/name/ >>>>> #Name info >>>>> cn: Name Surname >>>>> sn: Surname >>>>> givenName: Name >>>>> displayName: Name Surname >>>>> #Work info >>>>> title: System Administrator >>>>> mail: address@mail >>>>> #Misc >>>>> userPassword: {SSHA}vB/RyxNdsVkwc9dDxEuS/sIGESBAkzTw >>>>> objectClass: posixAccount >>>>> objectClass: inetOrgPerson >>>>> >>>>> Now, with getent command-line there is not this user. Why? >>>>> >>>>> >>>>> >>>>> >>>>> >>> >> >