From fb2c8d11ebe0d0ac66800897d7f5675be11d5df6 Mon Sep 17 00:00:00 2001 From: Arthur de Jong Date: Sat, 14 Aug 2010 14:33:51 +0000 Subject: offer to add ldap to shadow in nsswitch.conf if a potential broken configuration is found git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1171 ef36b2f9-881f-0410-afb5-c4e39611909c --- debian/libpam-ldapd.templates | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 debian/libpam-ldapd.templates (limited to 'debian/libpam-ldapd.templates') diff --git a/debian/libpam-ldapd.templates b/debian/libpam-ldapd.templates new file mode 100644 index 0000000..1abfac5 --- /dev/null +++ b/debian/libpam-ldapd.templates @@ -0,0 +1,15 @@ +Template: libpam-ldapd/enable_shadow +Type: boolean +Default: true +_Description: Enable shadow lookups through NSS? + For the proper operation of the PAM stack the NSS module should return + shadow information for LDAP users, otherwise these users will not be able + to log in. Note that the shadow entries themselves may be empty (i.e. it + is not needed to expose password hashes). + . + More background information on this requirement can be found here: + http://bugs.debian.org/583492 + . + You can edit /etc/nsswitch.conf by hand or choose to add the entry + automatically now. Be sure to review the changes to /etc/nsswitch.conf if + you choose to add the entry now. -- cgit v1.2.3