Yes it works if I remove the brackets e.g.
nss_base_passwd
cn=users,dc=win2003r2,dc=home?sub?&(&(objectclass=user)(uidnumber=*))(employeeid=*)
nss_base_shadow
cn=users,dc=win2003r2,dc=home?sub?&(&(objectclass=user)(uidnumber=*))(employeeid=*)
nss_base_group
cn=users,dc=win2003r2,dc=home?sub?&(objectclass=group)(gidnumber=*)
It would be useful to print at least an error instead of silently ignore the
search error. It should be somewhere after ldap_search in ldap-nss.c calls
like in line 2701:
rc = ldap_search_ext (__session.ls_conn, base, scope, filter,
(char **) attrs, 0, pServerCtrls, NULL,
LDAP_NO_LIMIT, sizelimit, msgid);
if (rc != LDAP_SUCESS)
syslog (LOG_INFO, "nss_ldap: ldap search error: %s
(%d)",ldap_err2string (rc),rc);
"Alex Samad" <
alex@...> wrote in message
news:
20071223055538.GA12092@......