Ubuntu
nss-pam-ldapd package

  1. Bug #1229713
  2. Comment #8

Comment 8 for bug 1229713

Revision history for this message
Nathan Stratton Treadway (nathanst) wrote : Re: [Bug 1229713] [NEW] nslcd auto-configuration disregards existing nslcd.conf

On Tue, Sep 24, 2013 at 13:13:32 -0000, Simon Fraser wrote:
> The guess_ldap_uri() function should only be called if /etc/nslcd.conf
> is not usable, to prevent it overwriting valid configuration with
> incorrectly guessed ones.

Looking more closely at the nslcd.config script, I'm pretty sure
that in fact guess_ldap_uri() is only called when the package is
first installed -- specifically, when the debconf "ldap-uris" value
is empty.

However, what happens during that initial run is that the value
returned by guess_ldap_uri() is then stored into debconf... and
from then on the bug discussed in Debian 717063 means that that
debconf value overwrites the nslcd.conf "uri" setting in later
package upgrades.

(Simon, you could confirm that this is your issue by running
"debconf-show nslcd" and seeing if indeed the AD servers were still
listed there in the "ldap-uris" value.)

Anyway, if that is the situation then I think Rafael's new package
will fix your problem, too (since it will make the current
nslcd.conf value overwrite the debconf value rather than the other
way around).

       Nathan