Can log in with either local(shadow) or ldap password

[Gary Greene]

On Thursday 05 February 2009 02:48:59 pm RB wrote:
> Your prior question (about using SSHA hashes) now seems to indicate
> you're wanting to keep the local & network passwords in-sync.  The
> best way would be to use cached credentials (via nscd) and forget
> about doing local users.

Problem is, far as I know, without using nss_cache, or something like it 
(libnss-db and friends, etc), you cannot cache credentials in a truly offline 
environment like notebooks run into for LDAP credentials using nscd. This 
coupled with nscd's track-record or silent failures that cannot be fixed 
reliably make the use of synchronized cached accounts a holy grail.



-- 
Gary L. Greene, Jr.
Sent from: peorth
 23:59:56 up 5 days, 12:14,  5 users,  load average: 0.22, 0.31, 0.26
==========================================================================
Developer and Project Lead for the AltimatOS open source project
Volunteer Developer for the KDE open source project
See http://www.altimatos.com/ and http://www.kde.org/ for more information
==========================================================================

Please avoid sending me Word or PowerPoint attachments.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
URL: <http://listman.redhat.com/archives/pam-list/attachments/20090206/3ff5243e/attachment.sig>