Check the URI/host spec in /etc/libnss-ldap.conf to make sure it is
valid... there was a revision or few that mucked up in converting from
host to uri.

the syntax should be:
uri ldapi:/// (if you enabled that)
uri ldap:/// or ldap://fqdn/
uri ldaps://localhost:636/

The next problem comes in if ssl is in use, there are issues with the
code in determining to use ldaps:/// vs ldap:///
So if you need ssl, either use TLS, or force the port to :636

a few checks:
getent passwd <uid>
ldapsearch -Hldap:/// uid=<uid>

--
Rick Nelson
I'd crawl over an acre of 'Visual This++' and 'Integrated Development
That' to get to gcc, Emacs, and gdb. Thank you.
-- Vance Petree, Virginia Power


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org