Print this page
NEX-7320 /etc/nsswitch.ldap needs to be modified to not break share operations
Reviewed by: Alexander Eremin <alexander.eremin@nexenta.com>
Reviewed by: Evan Layton <evan.layton@nexenta.com>
Revert "NEX-2617 changed in nsswitch.ldap to allow by-host name server resolve during ldapclient configuration"
This reverts commit d976c53a36e6bdbff4a34beeb725cccf7fe10e0c.
NEX-2617 changed in nsswitch.ldap to allow by-host name server resolve during ldapclient configuration

Split Close
Expand all
Collapse all
          --- old/usr/src/cmd/netfiles/nsswitch.ldap
          +++ new/usr/src/cmd/netfiles/nsswitch.ldap
        1 +#
   1    2  # CDDL HEADER START
   2    3  #
   3    4  # The contents of this file are subject to the terms of the
   4    5  # Common Development and Distribution License (the "License").
   5    6  # You may not use this file except in compliance with the License.
   6    7  #
   7    8  # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
   8    9  # or http://www.opensolaris.org/os/licensing.
   9   10  # See the License for the specific language governing permissions
  10   11  # and limitations under the License.
↓ open down ↓ 6 lines elided ↑ open up ↑
  17   18  #
  18   19  # CDDL HEADER END
  19   20  #
  20   21  # Copyright (c) 1999, 2010, Oracle and/or its affiliates. All rights reserved.
  21   22  #
  22   23  
  23   24  #
  24   25  # /etc/nsswitch.ldap:
  25   26  #
  26   27  # An example file that could be copied over to /etc/nsswitch.conf; it
  27      -# uses LDAP in conjunction with files.
       28 +# uses LDAP in conjunction with files and DNS.
  28   29  #
  29   30  # "hosts:" and "services:" in this file are used only if the
  30   31  # /etc/netconfig file has a "-" for nametoaddr_libs of "inet" transports.
  31   32  
  32   33  # LDAP service requires that svc:/network/ldap/client:default be enabled
  33   34  # and online.
       35 +# DNS service expects that an instance of svc:/network/dns/client be
       36 +# enabled and online.
  34   37  
  35      -# the following two lines obviate the "+" entry in /etc/passwd and /etc/group.
  36   38  passwd:     files ldap
  37   39  group:      files ldap
  38   40  
  39      -# consult /etc "files" only if ldap is down. 
  40      -hosts:      files ldap
       41 +# You must also set up the /etc/resolv.conf file for DNS name
       42 +# server lookup.  See resolv.conf(4). For lookup via mdns  
       43 +# svc:/network/dns/multicast:default must also be enabled. See mdnsd(1M)
       44 +hosts:      files dns mdns
  41   45  
  42   46  # Note that IPv4 addresses are searched for in all of the ipnodes databases
  43   47  # before searching the hosts databases.
  44      -ipnodes:    files ldap
       48 +ipnodes:    files dns mdns
  45   49  
  46      -networks:   files ldap
  47      -protocols:  files ldap
  48      -rpc:        files ldap
  49      -ethers:     files ldap
  50      -netmasks:   files ldap
  51      -bootparams: files ldap
  52      -publickey:  files ldap
       50 +networks:   files
       51 +protocols:  files
       52 +rpc:        files
       53 +ethers:     files
       54 +netmasks:   files
       55 +bootparams: files
       56 +publickey:  files
  53   57  
  54      -netgroup:   ldap
       58 +netgroup:   files
  55   59  
  56      -automount:  files ldap
  57      -aliases:    files ldap
       60 +automount:  files
       61 +aliases:    files
       62 +services:   files
  58   63  
  59      -# for efficient getservbyname() avoid ldap
  60      -services:   files ldap
       64 +printers:   user files
  61   65  
  62      -printers:   user files ldap
       66 +auth_attr:  files
       67 +prof_attr:  files
  63   68  
  64      -auth_attr:  files ldap
  65      -prof_attr:  files ldap
       69 +project:    files
  66   70  
  67      -project:    files ldap
  68      -
  69      -tnrhtp:     files ldap
  70      -tnrhdb:     files ldap
       71 +tnrhtp:     files
       72 +tnrhdb:     files
    
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX