>> # /etc/login.conf.d/ldap
>>
>> ldap:\
>> :auth=ldap:\
>> :x-ldap-uscope=subtree:\
>> :tc=default:
>
> "auth=ldap" (rather than "auth=-ldap") suggests you're using login_ldap
> from the base OS, but that uses /etc/login_ldap.conf for settings so
> presence of x-ldap-uscope suggests you're using login_ldap from ports.
>
> The ports version has been left around partly because configuration is
> different and it would suck if you can't login to fix it, and partly in
> case anyone was actually needing the features that were dropped when it
> was rewritten for the base OS.
>
> It would be a good idea to use the base OS version as there's less risk
> of it getting out of sync following uodates. And if you used the ports
> one and *copied* it over /usr/libexec/auth/login_ldap you definitely
> want to fix that.
Thanks Stuart. I am using the OS login_ldap so I didn't need
:x-ldap-uscope=subtree:\
No comments:
Post a Comment