Package: libnss-ldapd Version: 0.6.2 I just tested the latest nss-ldapd package at the university, with OpenLDAP as the LDAP server. My initial test show that 'group pre do not return the complete set of groups, while 'su - pre -c id' return all the users groups. This is on Debian Etch using a backport (recompile) of nss-ldapd. No idea what is going on, but there are a lot of reconnects and some 'error writing to client'.
Here is the test run without debugging. diskless.uio.no# id pre uid=43502(pre) gid=300(usit) groups=300(usit),206(palconf) diskless.uio.no# su - pre -c id uid=43502(pre) gid=300(usit) groups=206(palconf),300(usit),330(ucore),1524(w3usit),65876(uio-rt) diskless.uio.no# Here is the test run with debugging. diskless.uio.no# nslcd -d & [1] 3682 diskless.uio.no# nslcd: DEBUG: add_uri(ldap://ldap-prod01.uio.no/) nslcd: version 0.6.2 starting nslcd: DEBUG: unlink() of /var/run/nslcd/socket failed (ignored): No such file or directory nslcd: DEBUG: setgroups(0,NULL) done nslcd: accepting connections diskless.uio.no# id pre nslcd: DEBUG: connection from pid=3688 uid=0 gid=0 nslcd: DEBUG: nslcd_passwd_byname(pre) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixAccount)(uid=pre))") nslcd: DEBUG: simple anonymous bind to ldap://ldap-prod01.uio.no/ nslcd: connected to LDAP server ldap://ldap-prod01.uio.no/ nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3688 uid=0 gid=0 nslcd: DEBUG: nslcd_passwd_byuid(43502) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixAccount)(uidNumber=43502))") nslcd: DEBUG: simple anonymous bind to ldap://ldap-prod01.uio.no/ nslcd: connected to LDAP server ldap://ldap-prod01.uio.no/ nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3688 uid=0 gid=0 nslcd: DEBUG: nslcd_group_bygid(300) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=300))") nslcd: DEBUG: simple anonymous bind to ldap://ldap-prod01.uio.no/ nslcd: connected to LDAP server ldap://ldap-prod01.uio.no/ nslcd: DEBUG: connection from pid=3688 uid=0 gid=0 nslcd: DEBUG: nslcd_group_bygid(300) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=300))") nslcd: DEBUG: simple anonymous bind to ldap://ldap-prod01.uio.no/ nslcd: error writing to client nslcd: connected to LDAP server ldap://ldap-prod01.uio.no/ nslcd: error writing to client nslcd: DEBUG: connection from pid=3688 uid=0 gid=0 nslcd: DEBUG: nslcd_group_bygid(300) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=300))") nslcd: DEBUG: simple anonymous bind to ldap://ldap-prod01.uio.no/ nslcd: connected to LDAP server ldap://ldap-prod01.uio.no/ nslcd: DEBUG: connection from pid=3688 uid=0 gid=0 nslcd: DEBUG: nslcd_group_bygid(300) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=300))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3688 uid=0 gid=0 nslcd: DEBUG: nslcd_group_all() nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(objectClass=posixGroup)") nslcd: error writing to client nslcd: DEBUG: connection from pid=3688 uid=0 gid=0 nslcd: DEBUG: nslcd_group_all() nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(objectClass=posixGroup)") nslcd: error writing to client nslcd: DEBUG: connection from pid=3688 uid=0 gid=0 nslcd: DEBUG: nslcd_group_bygid(300) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=300))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3688 uid=0 gid=0 nslcd: DEBUG: nslcd_group_bygid(206) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=206))") nslcd: DEBUG: ldap_result(): end of results uid=43502(pre) gid=300(usit) groups=300(usit),206(palconf) diskless.uio.no# su - pre -c id nslcd: DEBUG: connection from pid=3690 uid=0 gid=0 nslcd: DEBUG: nslcd_passwd_byname(pre) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixAccount)(uid=pre))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3690 uid=0 gid=0 nslcd: DEBUG: nslcd_passwd_byname(pre) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixAccount)(uid=pre))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3690 uid=0 gid=300 nslcd: DEBUG: nslcd_group_bymember(pre) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixAccount)(uid=pre))") nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(|(memberUid=pre)(uniqueMember=uid=pre,cn=users,cn=system,dc=uio,dc=no)))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3690 uid=0 gid=300 nslcd: DEBUG: nslcd_group_bygid(206) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=206))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3690 uid=0 gid=300 nslcd: DEBUG: nslcd_group_bygid(330) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=330))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3690 uid=0 gid=300 nslcd: DEBUG: nslcd_group_bygid(1524) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=1524))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3690 uid=0 gid=300 nslcd: DEBUG: nslcd_group_bygid(1524) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=1524))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3690 uid=0 gid=300 nslcd: DEBUG: nslcd_group_bygid(1524) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=1524))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3690 uid=0 gid=300 nslcd: DEBUG: nslcd_group_bygid(65876) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=65876))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3691 uid=43502 gid=300 nslcd: DEBUG: nslcd_passwd_byuid(43502) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixAccount)(uidNumber=43502))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3705 uid=43502 gid=300 nslcd: DEBUG: nslcd_passwd_byuid(43502) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixAccount)(uidNumber=43502))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3708 uid=43502 gid=300 nslcd: DEBUG: nslcd_passwd_byuid(43502) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixAccount)(uidNumber=43502))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3708 uid=43502 gid=300 nslcd: DEBUG: nslcd_group_bygid(300) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=300))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3708 uid=43502 gid=300 nslcd: DEBUG: nslcd_group_bygid(300) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=300))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3708 uid=43502 gid=300 nslcd: DEBUG: nslcd_group_bygid(300) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=300))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3708 uid=43502 gid=300 nslcd: DEBUG: nslcd_group_bygid(300) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=300))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3708 uid=43502 gid=300 nslcd: DEBUG: nslcd_group_bygid(206) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=206))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3708 uid=43502 gid=300 nslcd: DEBUG: nslcd_group_bygid(330) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=330))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3708 uid=43502 gid=300 nslcd: DEBUG: nslcd_group_bygid(1524) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=1524))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3708 uid=43502 gid=300 nslcd: DEBUG: nslcd_group_bygid(65876) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=65876))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3691 uid=43502 gid=300 nslcd: DEBUG: nslcd_passwd_byuid(43502) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixAccount)(uidNumber=43502))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3691 uid=43502 gid=300 nslcd: DEBUG: nslcd_group_bygid(300) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=300))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3691 uid=43502 gid=300 nslcd: DEBUG: nslcd_group_bygid(300) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=300))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3691 uid=43502 gid=300 nslcd: DEBUG: nslcd_group_bygid(300) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=300))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3691 uid=43502 gid=300 nslcd: DEBUG: nslcd_group_bygid(300) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=300))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3691 uid=43502 gid=300 nslcd: DEBUG: nslcd_group_bygid(206) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=206))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3691 uid=43502 gid=300 nslcd: DEBUG: nslcd_group_bygid(300) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=300))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3691 uid=43502 gid=300 nslcd: DEBUG: nslcd_group_bygid(330) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=330))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3691 uid=43502 gid=300 nslcd: DEBUG: nslcd_group_bygid(1524) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=1524))") nslcd: DEBUG: ldap_result(): end of results nslcd: DEBUG: connection from pid=3691 uid=43502 gid=300 nslcd: DEBUG: nslcd_group_bygid(65876) nslcd: DEBUG: myldap_search(base="cn=system,dc=uio,dc=no", filter="(&(objectClass=posixGroup)(gidNumber=65876))") nslcd: DEBUG: ldap_result(): end of results uid=43502(pre) gid=300(usit) groups=206(palconf),300(usit),330(ucore),1524(w3usit),65876(uio-rt) diskless.uio.no# fg nslcd -d nslcd: caught signal SIGINT (2), shutting down nslcd: version 0.6.2 bailing out diskless.uio.no# Happy hacking, -- Petter Reinholdtsen -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]