Comment 9 for bug 644632

The problem with the patch as written is that while 'users' gets updated correctly with this line:
users=`awk -v min="$MIN" -v okuser="$OKUSERS" -F: 'BEGIN{split(okuser,a,/,/);for (i in a) b[a[i]]} ($3 < min) && !($1 in b){printf "%s%s",s,$1;s=","}' /etc/passwd`

'users' is immediately updated after this however to merge what was in nss_initgroups_ignoreusers before and what is currently in 'users', so because 'uucp,www-data' was in nss_initgroups_ignoreusers before running nssldap-update-ignoreusers, it gets merged back in.