RE: getent passwd inconsistent loginShell with ldapsearch

["Rodney Simioni" <rodney.simioni@verio.net>]

I disabled nscd. Here's my ldap.conf 

#SIZELIMIT      12
#TIMELIMIT      15
#DEREF          never
TLS_CACERTDIR /etc/openldap/cacerts
#URI ldap://127.0.0.1/
URI ldap://127.0.0.1/
BASE dc=wh,dc=local
port 389

It's still inconsistent.

-----Original Message-----
From: openldap-technical-bounces@OpenLDAP.org [mailto:openldap-technical-bounces@OpenLDAP.org] On Behalf Of Liam Gretton
Sent: Monday, March 11, 2013 5:42 AM
To: openldap-technical@openldap.org
Subject: Re: getent passwd inconsistent loginShell with ldapsearch

On 08/03/2013 21:41, Rodney Simioni wrote:
> That didnât fix it, getent and ldapsearch is still inconsistent.

Firstly, switch off nscd altogether when tracking down these problems, it will only get in the way and cause confusion.

As there's a mismatch between the user's shell in the two outputs, and assuming that your ldapsearch is definitely querying what ldap.conf is configured to look at, then I'd guess that you have an entry for this user in /etc/passwd.

-- 
Liam Gretton                                    liam.gretton@le.ac.uk
Systems Specialist                            http://www.le.ac.uk/its
IT Services                                   Tel: +44 (0)116 2522254
University of Leicester, University Road Leicestershire LE1 7RH, United Kingdom




This email message is intended for the use of the person to whom it has been sent, and may contain information that is confidential or legally protected. If you are not the intended recipient or have received this message in error, you are not authorized to copy, distribute, or otherwise use this message or its attachments. Please notify the sender immediately by return e-mail and permanently delete this message and any attachments. Verio Inc. makes no warranty that this email is error or virus free.  Thank you.