This is the mail archive of the
libc-alpha@sources.redhat.com
mailing list for the glibc project.
Re: How to get LDAP support in NSS/compat?
- From: Thorsten Kukuk <kukuk at suse dot de>
- To: libc-alpha at sources dot redhat dot com
- Date: Fri, 23 May 2003 23:48:29 +0200
- Subject: Re: How to get LDAP support in NSS/compat?
- Organization: SuSE Linux AG, Nuernberg, Germany
- References: <E19Aa85-0003fN-00@saruman.uio.no> <3EAECAC3.8090101@redhat.com> <20030429224123.GA30703@suse.de> <2fl3ck0yr4t.fsf@saruman.uio.no> <20030520085345.GA5778@suse.de> <20030522093410.GA24075@suse.de> <2fladddwhow.fsf@saruman.uio.no>
On Fri, May 23, Petter Reinholdtsen wrote:
> [Thorsten Kukuk]
> > Next version of my patch. This time, passwd, shadow and group is
> > implemented. This should be the final version for this services.
>
> Very good. :)
>
> Is it normal to use the compat module for shadow? I would expect it
> to be sufficient to use it for passwd, and then let shadow be 'nis
> files' or 'ldap'files'.
It is normal that you can use the compat module for shadow.
> I guess the compat module should be moved from nis/ and into nss/ as
> it no longer is nis specific?
It still uses some NIS functions for easier netgroup handling.
> > Only initgroups_dyn is missing, I disabled it for now.
>
> Is initgroups_dyn() needed for anything?
Yes, with initgroups_dyn() a initgroup call from login/su/cron is
much faster than without for some services. Because for some
services you don't need to parse the whole database, but you can
start a special query for the data you need.
Or for NIS: With initgroups_dyn, you can get all data with one
call, without initgroups_dyn you have to make one call for every
group entry, which is much slower.
Thorsten
--
Thorsten Kukuk http://www.suse.de/~kukuk/ kukuk@suse.de
SuSE Linux AG Deutschherrnstr. 15-19 D-90429 Nuernberg
--------------------------------------------------------------------
Key fingerprint = A368 676B 5E1B 3E46 CFCE 2D97 F8FD 4E23 56C6 FB4B