Fedora directory users - Jan 2007 - Trouble with NSS and Fedora-ds

Hi List!

Ldapsearch returns data from "Fedora-DS" but "getent
group/passwd" and "id user" commands can not get them. They just
can get data from "/etc/passwd" and "/etc/group".

What is wrong?
Please, can someone help me? 

Agnaldo

P.S.: Some configuration files

# /etc/pam.d/system-auth
####################
#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth        required      /lib/security/$ISA/pam_env.so
auth        sufficient    /lib/security/$ISA/pam_unix.so likeauth nullok
auth        sufficient    /lib/security/$ISA/pam_ldap.so use_first_pass
auth        required      /lib/security/$ISA/pam_deny.so

account     required      /lib/security/$ISA/pam_unix.so broken_shadow
account     sufficient    /lib/security/$ISA/pam_succeed_if.so uid < 100
quiet
account     [default=bad success=ok user_unknown=ignore]
/lib/security/$ISA/pam_ldap.so
account     required      /lib/security/$ISA/pam_permit.so

password    requisite     /lib/security/$ISA/pam_cracklib.so retry=3
password    sufficient    /lib/security/$ISA/pam_unix.so nullok use_authtok md5
shadow
password    sufficient    /lib/security/$ISA/pam_ldap.so use_authtok
password    required      /lib/security/$ISA/pam_deny.so

session     required      /lib/security/$ISA/pam_limits.so
session     required      /lib/security/$ISA/pam_unix.so
session     optional      /lib/security/$ISA/pam_ldap.so


# /etc/nsswitch.conf
#################
passwd:     files ldap
shadow:     files ldap
group:      files ldap

hosts:      files dns

bootparams: files
ethers:     files
netmasks:   files
networks:   files
protocols:  files ldap
rpc:        files
services:   files ldap
netgroup:   files ldap
publickey:  files
automount:  files ldap
aliases:    files


# ldap.conf
#########
host 192.168.2.3
base dc=sei,dc=intranet
bindpw passwd
rootbinddn cn=Directory Manager,dc=sei,dc=intranet
timelimit 50
pam_lookup_policy yes

nss_base_passwd         ou=People,dc=sei,dc=intranet?one
nss_base_shadow         ou=People,dc=sei,dc=intranet?one
nss_base_group          ou=Groups,dc=sei,dc=intranet?one
pam_password exop
ssl off

 
# /etc/pam.d/login
################
#%PAM-1.0
auth       required     pam_securetty.so
auth       required     pam_stack.so service=system-auth
auth       required     pam_nologin.so
#auth       sufficient /lib/security/pam_ldap.so use_first_pass
#account    sufficient /lib/security/pam_ldap.so
account    sufficient   pam_stack.so service=system-auth
password   required     pam_stack.so service=system-auth
# pam_selinux.so close should be the first session rule
# session    required   pam_selinux.so close
session    required     pam_stack.so service=system-auth
session    required     pam_loginuid.so
session    optional     pam_console.so
# pam_selinux.so open should be the last session rule
# session    required   pam_selinux.so open



[root@netuno1 ~]# strings /lib/libnss_ldap.so.2 | grep conf
_nss_ldap_readconfig
_nss_ldap_readconfigfromdns
_nss_ldap_init_config
sysconf
-conf
/etc/ldap.conf
/etc/openldap/ldap.conf
version conflict in sasl_client_add_plugin for %s
%.*s%c%s.conf
auth-conf
DB environment not configured for transactions
Database environment not configured for encryption
%s interface requires an environment configured for the %s subsystem
DB_ENV->set_lk_conflicts
Environment not configured as replication master or client
 an index not configured to support duplicates
Primary databases may not be configured with duplicates
ssl session id conflict
confounded by authenticator.
configuration file routines
id-it-confirmWaitTime
id-cmc-confirmCertAcceptance
no sign function configured
no verify function configured
no config database
X509V3_EXT_conf
no conf
no conf or environment variable
conflicting engine id
v3_conf.c
conf_lib.c
conf_api.c
conf_def.c
/etc/krb5.conf:/etc/krb5.conf
Can''t open/find Kerberos configuration file
Improper format of Kerberos configuration file
No supported encryption types (config file error?)

Agnaldo Freitas wrote:
>  
> Ldapsearch returns data from "Fedora-DS" but "getent
group/passwd" and
> "id user" commands can not get them. They just can get data from 
> "/etc/passwd" and "/etc/group".
...
> # *ldap.conf*
> #########
> host 192.168.2.3
> base dc=sei,dc=intranet
> bindpw passwd
> rootbinddn cn=Directory Manager,dc=sei,dc=intranet
> timelimit 50
> pam_lookup_policy yes
>  
> nss_base_passwd         ou=People,dc=sei,dc=intranet?one
> nss_base_shadow         ou=People,dc=sei,dc=intranet?one
> nss_base_group          ou=Groups,dc=sei,dc=intranet?one
> pam_password exop
> ssl off
You didn''t list a path on this one.  It should be /etc/ldap.conf, is
it?
  Is the file readable by the user running "id" and
"getent"?  Try
removing the rootbinddn and bindpw entries; they usually aren''t
necessary.