Problem with winbind on Solaris 8 with LDAP patch 108993-18

[Edgar, Bob]

This patch back-ports the Solaris 9 LDAP functionality to Solaris 8.

After the patch is applied the winbind entries in /etc/nsswitch.conf
no longer work.
   passwd:     files winbind nisplus
   group:      files winbind nisplus

In fact, with the patch and the winbind entry, simple logins don't work.
I haven't had a chance to test winbind functionality on Solaris 9 but I
suspect it doesn't work there at all.

The problem seems to be that nsswitch.conf doesn't support an arbitrary
data source. From the manual page on Solaris 8:

     The following sources may be used:

     Source                   Uses
     files                    /etc/hosts,          /etc/passwd,
                              /etc/inet/ipnodes, /etc/shadow
     nis                      NIS(YP)
     nisplus                  NIS+
     ldap                     LDAP
     dns                      Valid only for  hosts;  uses  the
                              Internet Domain Name Service.
     compat                   Valid only for passwd and  group;
                              implements   "+"   and  "-".  See
                              Interaction with +/- syntax.
     user                     Valid only for  printers;  imple-
                              ments         support         for
                              ${HOME}/.printers.
     xfn                      Valid only for  printers;  imple-
                              ments  support  for  FNS  printer
                              contexts. Provided to allow tran-
                              sition away from FNS printer con-
                              texts.

But, further on in the same page:
     A source named SSS is implemented by a shared  object  named
     nss_SSS.so.1 that resides in /usr/lib.
...

...
     Misspelled names of sources and databases will be treated as
     legitimate  names  of  (most likely nonexistent) sources and
     databases.

Has anyone got any good ideas about what to do here? Perhaps a request
for enhancement to Sun? Maybe it's a bug because it used to work?

bob

The legal  word: 
    "This message only reflects the personal opinion of the author and 
      must not be regarded as or considered to be any form of reference 
      to the opinion of the Commerzbank AG or any of its affiliated 
      companies." 
On the other hand, it probably doesn't accurately reflect the author's 
opinion either, but that's another story. So it goes. 
Copyright (C) 2003 MrBob, no rights reserved.