[rhelv6-list] getent behavior

Chris Adams cmadams at hiwaay.net
Mon Dec 6 21:51:07 UTC 2010


Once upon a time, Prentice Bisbal <prentice at ias.edu> said:
> I use LDAP for account information. On previous versions of RHEL, 
> 'getent passwd' would dump a list of all accounts, both local and in 
> LDAP. If addtional sources were listed in /etc/nsswitch.conf, it would 
> show them, too, presumably.
> 
> In RHEL6 (Beta 2), it only shows what's stored in /etc/passwd. If I want 
> to see an account that's in LDAP, I can query a specific account like this:

By default, when network authentication is configured, sssd is used
(instead of the old pam_ldap/nss_ldap combo), and it has enumeration
disabled by default.

It is possible to change this in /etc/sssd/sssd.conf.
-- 
Chris Adams <cmadams at hiwaay.net>
Systems and Network Administrator - HiWAAY Internet Services
I don't speak for anybody but myself - that's enough trouble.




More information about the rhelv6-list mailing list