Re: Problems with nss_ldap - where to start?

[m.roth@xxxxxxxxx]

> On Thu, 17 Dec 2009, Devin Reade wrote:
>
>> If you're going to be doing LDAP-based authentication on the server
>> that is running the LDAP server, watch out for this bug, which has been
>> around since at least FC5.  It's still a problem as of FC10:
>> 	<https://bugzilla.redhat.com/show_bug.cgi?id=182464>
>
> I disagree that this is a bug. It's not a problem if you configure
> ldap.conf properly. For example, using
>
> nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon,dbus

Actually, if this is in a business setting, and esp. if they're in server
rooms, turn *off* avahi-daemon, and fix iptables so that there's no hole
for it.

       mark

_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos