Re: slapd breaks NSS, NSS breaks slapd

[Dmitriy Kirhlarov <dimma@higis.ru>]

Emmanuel Dreyfus wrote:
> Hello
>
> I have a machine where slapd will not start if ldap://localhost is
> listed in /etc/nss_ldap.conf. It just hangs:
...
> If I remove ldap://localhost from nss_ldap.conf, is works fine. Any idea
> how to get that working?

add:
---
nss_reconnect_sleeptime 0
nss_reconnect_maxsleeptime 1
nss_reconnect_maxconntries 1
---

For details read:
http://www.liquidx.net/blog/2006/04/03/nss_ldap-undocumented-nss_reconnect_tries/

> Here is nss_ldap.conf:
> BASE    dc=example,dc=net
> URI     ldap://localhost ldap://ldap.example.net
> TLS_CACERT      /etc/openssl/certs/ca.crt
> TLS_REQCERT     demand


It's library config (etc/openldap/ldap.conf). Not equal with application 
conf (etc/ldap.conf). nss_ldap.conf can be symlink to application config.

WBR.
Dmitriy