Re: [courier-users] question about pam usage with authldap

On Wed, 2005-09-07 at 18:36 -0400, Sam Varshavchik wrote:
> You might be able to suppress LDAP queries by putting the global username
> and groupname in your passwd and group file, then listing "files" in
> nsswitch before ldap, so that the passwd/group files are searched first,
> before hitting ldap.

Unfortunately I do not think this is true, because the user/group is
already listed in the local /etc/passwd and /etc/group and ldap is
always the last choice in our nsswitch configuration.

> > Are there analogous settings for these as well? I looked through the
> > configuration files but was unable to see anything similar.
>
> authlib uses the LDAP setting for all authentication requests.

Perhaps I'm just being dense here, but the connections are opened when
the service in started, before any authentication requests should be
made. Plus as I said, the connection being made is to the ldap server
serving login accounts. On top of that, I would think that the
authdaemon process would have these sockets open if they were for
authentication purposes.

I apologize for my pestering. I'm just trying to understand where these
connections are coming from and (hopefully) get rid of them as a
dependency.

Regards,
Bob

--
Earl (Bob) Kinney
UNIX Systems Administrator
Harvard-MIT Data Center



-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/.../courier-users