Not using LDAP for auth, please downgrade libpam-ldap to Recommends:
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
ldap-auth-client (Ubuntu) |
Confirmed
|
Wishlist
|
Unassigned |
Bug Description
Binary package hint: ldap-auth-client
Looking at ldap-auth-client 0.5.2 in Intrepid.
I am using LDAP in conjunction with Kerberos authentication and AFS. (This is much like what MIT does on their campus network, except that they use Hesiod instead of LDAP.)
In this setup, the ldap-auth-config package is desirable, to store the various LDAP-related settings and keep /etc/ldap.conf up to date. The libpam-ldap package, however, is not. The pam-auth-update mechanism assumes that I want to use LDAP for authentication, when in fact I only want to use it for user/group lookup via NSS, leaving the task of authentication to Kerberos.
I would like to be able to install ldap-auth-config without libpam-ldap, to simplify system administration. (This makes more sense when you consider that the former really ought be named e.g. "ldap-config", a name that doesn't presume that LDAP will be used for authentication.)
@Daniel: Right now I'm looking into the somewhat related bug #334374. Will look into this one, once I see how that one turns out.