LDAP passwd question

Hi,
I have my LDAP setup and users in it, if I configure my nsswitch.config like:
passwd: compat
passwd_compat: ldap

getent passwd does not return my LDAP users.

If I configure my nsswitch.config like:
passwd: files ldap

getent passwd returns both local and LDAP users.

On another system, I have the first configuration working, and I cannot figure out what I am missing on the new system, why it is not behaving the same way, or why passwd: compat, passwd_compat: ldap isn’t the same as passwd: files ldap.

If someone could shed some light it would be much appreciated.

On 2015-04-28 03:46, wslyhbb wrote:
> If someone could shed some light it would be much appreciated.

openSUSE version?


Cheers / Saludos,

Carlos E. R.

(from 13.1 x86_64 “Bottle” (Minas Tirith))

openSuse 13.2

I have to say that opensuse’s support for LDAP is more than lousy.
Actually there is zero documentation in the reference.
This is really annoying.

Additionally the support to setup LDAP server in yast (which never was a hioghlight) went worse with 13.2.

Moreover the behavior regarding the problem described here is very murky.

I have zero understanding why opensuse is so much different from most other Linux systems in terms of LDAP.

If you look to my other posting “system update killed LDAP server” you may understand that I am about now to shift to a different distribution, probably CentOS or maybe Debian after 16 years with SUSE.

I thought they already told you to stop posting your frustrations here, hijacking someone else’s threads to whine about it isn’t going to fix anything other than you getting yourself suspended.

Sorry, you got something wrong about the meaning of the “compat” option which actually is regarded deprecated since a long time already.
It instructs the system to behave in a “compatible” manner, this means, a +@netgroup has to be entered at the end of passwd to include the ldap users. Otherwise it is not the same like “files ldap”, sorry for that.

I am not sure, however, if opensuse is supporting the compat / +@netgroup scheme at all.

Ok, thanks for your explanation :-).

ANYTIME.
You see, even then “whining students” are contributing here sometimes more help than the “behavior advisors”.

PROBLEM SOLVED.