Re: ldap group name resolving problem

[Pat Riehecky <prieheck@iwu.edu>]

In your /etc/libnss-ldap.conf do you have

pam_groupdn ou=Groups,dc=example,dc=com
pam_member_attribute uniquemember
nss_base_group         ou=Group,dc=example,dc=com?one

set?  Those have bitten me in the past.  You should also
check /etc/pam_ldap.conf

Pat


On Fri, 2008-02-29 at 17:43 +0000, Christian Weihrauch wrote:
> Hi,
> 
> I have problems with debian etch Linux clients resolving group names
> served by our LDAP server. user and passwd work because I can login
> properly.
> "getent group" properly shows the group served by the LDAP server.
> eg: #getent group
> mygroup:x:1000:chris
> 
> However "id username" only shows LDAP served groupIDs but not their names.
> eg: #id chris
> uid=1002(chris) gid=1000 groups=1000,20(dialout)
> 
> This means that I can't do things like chgrp eg: "chgroup mygroup
> directoryname" gives:
> "chgrp: invalid group `mygroup'"
> 
> I am using nscd and nsswitch.conf says:
> passwd:         files ldap
> group:          files ldap
> shadow:         files ldap
> 
> Any ideas?
> 
> Thanks!