freebsd stable - Sep 2016 - Problem with nsswitch.conf

Good morning All,

I'm trying to configure my server as an LDAP client. I installed the nslcd
service and it's working great.

My problem is when I issue the command getent passwd it only returns the LDAP
user not the local users.

#
# nsswitch.conf(5) - name service switch configuration file
# $FreeBSD: releng/10.2/etc/nsswitch.conf 224765 2011-08-10 20:52:02Z dougb $
#
group: file ldap
group_compat: nis ldap
hosts: files dns
networks: files
passwd: file ldap
passwd_compat: nis ldap
shells: files 
services: files 
services_compat: nis
protocols: files 
rpc: files


When I change the above group and passwd setting back to compat (which was the
default configuration) I get the local users but none of the ldap users show up.
In fact nslcd is not even called (i've checked by running it in debug mode).
So how do I configure nsswitch to use both the local /etc/passwd file and the
ldap. I need this because without it services will not start. IE nslcd complains
that nslcd is not a valid user when using the above configuration.

Any help would greatly be appreciated,
Shawn

On 09/21/2016 12:21, Shawn Bakhtiar wrote:
> Good morning All,
>
> I'm trying to configure my server as an LDAP client. I installed the
nslcd service and it's working great.
>
> My problem is when I issue the command getent passwd it only returns the
LDAP user not the local users.
>
> #
> # nsswitch.conf(5) - name service switch configuration file
> # $FreeBSD: releng/10.2/etc/nsswitch.conf 224765 2011-08-10 20:52:02Z dougb
$
> #
> group: file ldap
> group_compat: nis ldap
> hosts: files dns
> networks: files
> passwd: file ldap
> passwd_compat: nis ldap
> shells: files 
> services: files 
> services_compat: nis
> protocols: files 
> rpc: files
>
>
> When I change the above group and passwd setting back to compat (which was
the default configuration) I get the local users but none of the ldap users show
up. In fact nslcd is not even called (i've checked by running it in debug
mode). So how do I configure nsswitch to use both the local /etc/passwd file and
the ldap. I need this because without it services will not start. IE nslcd
complains that nslcd is not a valid user when using the above configuration.
It should be "files", plural.

Eric