Re: [Dovecot] 1.0.rc10 status report
dovecot-request@dovecot.org wrote:
I've had similar "User unknowns" with nscd in the past. I was using
dovecot ->getpwent -> nscd -> nss_ldap -> LDAP.
I found out that whenever the ldap server got restarted, nscd did not
restart properly and immediately its permanent ldap connection, and was
giving 'user unknown' replies at least for a few minutes.
Restarting nscd would fix the problem immediately. Running without nscd
would also fix the problem. There was no problem with pam_ldap
authentication.
As a result, the system got ignorant of its uncached users for a few
moments.
My workaround was a crontab that kept /etc/passwd up-to-date as well as an entry in the /etc/resolv.conf 'passwd: ldap files'
(cat /etc/passwd ; getent passwd ) |sort -u >/etc/passwd.tmp && mv /etc/passwd.tmp /etc/passwd
apap
On Mon, Oct 23, 2006 at 11:04:18AM +0300, "Αποστόλης Παπαγιαννάκης (Apostolis Papagiannakis)" wrote:
I've had similar "User unknowns" with nscd in the past. I was using dovecot ->getpwent -> nscd -> nss_ldap -> LDAP.
Are you using ldapi?
Axel.Thimm at ATrpms.net
Axel Thimm wrote:
Oops, I think I sent my previous post with unreadable HTML formating. I hope this one is OK.
In /etc/ldap.conf (nss_ldap conf file) I use two ldap servers as "ldaps" URIs.
/etc/ldap.conf
uri ldaps://ldap1.auth.gr/ ldaps://ldap2.auth.gr/
apap
On Mon, Oct 23, 2006 at 12:44:42PM +0300, "Αποστόλης Παπαγιαννάκης (Apostolis Papagiannakis)" wrote:
You need to make sure that the user nscd is running as has proper permissions to the required resources (r/w on ldapi sockets, read on ldaps' ca certs and the like). Turn on the debug level in ldap.conf (nss_ldap's, not openssl's) and sudo to the nscd user/group to test the access.
Also nscd doesn't use rootbinddn, it uses binddn.
Axel.Thimm at ATrpms.net
participants (3)
-
"Αποστόλης Παπαγια ννάκης (Apostolis Papagiannakis)"
-
"Αποστόλης Παπαγιαννάκη ς (Apostolis Papagiannakis)"
-
Axel Thimm