initgroups

[Thorsten Kukuk]

On Wed, Nov 06, Jean-Eric Cuendet wrote:

> >
> >
> >nss_ldap needs to support and provide this function for ldap.
> >
> Another question:
> Wh calls who? Is it:
> - su => glibc => nscd => nss_ldap => LDAP
> or
> - su => glibc => nss_ldap => nscd => LDAP
> 
> If I want to cache initgroups too, should I modify glibc, nscd or nss_ldap?

You cannot cache initgroups. Even if you would modify glibc and nscd
for it. It does not make any sense. It is much easier to dump the
group table from the LDAP server and append it to /etc/group regulary.

  Thorsten

-- 
Thorsten Kukuk       http://www.suse.de/~kukuk/        kukuk@suse.de
SuSE Linux AG        Deutschherrnstr. 15-19        D-90429 Nuernberg
--------------------------------------------------------------------    
Key fingerprint = A368 676B 5E1B 3E46 CFCE  2D97 F8FD 4E23 56C6 FB4B