CentOS 5.8-NSCD无法缓存密码

Question

我试图将NSCD配置为将ldap用户连接到我的PC上。

我喜欢，用户可以离线登录在这台电脑(在线ldap用户工作良好)。

实际上，我可以使用用户，但是当我尝试引入密码时，PC正在等待，最后，它说密码是不正确的。

我认为，缓存密码是问题所在，因为，用户接受的速度非常快，如果我清理nscd缓存，用户就错了。

这是我的nscd.conf

    logfile                 /var/log/nscd.log
    server-user             nscd
    debug-level             0
    paranoia                no
    restart-interval        3600

    enable-cache            passwd          yes
    positive-time-to-live   passwd          3600
    negative-time-to-live   passwd          20
    suggested-size          passwd          211
    check-files             passwd          yes
    persistent              passwd          yes
    shared                  passwd          yes
    max-db-size             passwd          33554432
    auto-propagate          passwd          yes

    enable-cache            group           yes
    positive-time-to-live   group           3600
    negative-time-to-live   group           60
    suggested-size          group           211
    check-files             group           yes
    persistent              group           yes
    shared                  group           yes
    max-db-size             group           33554432
    auto-propagate          group           yes

    enable-cache            hosts           no

和我的authconfig --测试

    authconfig --test:

    caching is enabled
    nss_files is always enabled
    nss_compat is disabled
    nss_db is disabled
    nss_hesiod is disabled
    hesiod LHS = ""
    hesiod RHS = ""
    nss_ldap is enabled
    LDAP+TLS is disabled
    LDAP server = "ldap://xxxxxxxxxxxxxxxx"
    LDAP base DN = "dc=xxxxxxxxxxxxxxx,dc=xxx"
    nss_nis is disabled
    NIS server = ""
    NIS domain = ""
    nss_nisplus is disabled
    nss_winbind is disabled
    SMB workgroup = "MYGROUP"
    SMB servers = ""
    SMB security = "user"
    SMB realm = ""
    Winbind template shell = "/bin/false"
    SMB idmap uid = "16777216-33554431"
    SMB idmap gid = "16777216-33554431"
    nss_sss is disabled by default
    nss_wins is disabled
    pam_unix is always enabled
    shadow passwords are enabled
    password hashing algorithm is md5
    pam_krb5 is disabled
    krb5 realm = "EXAMPLE.COM"
    krb5 realm via dns is disabled
    krb5 kdc = "kerberos.example.com:88"
    krb5 kdc via dns is disabled
    krb5 admin server = "kerberos.example.com:749"
    pam_ldap is enabled

     LDAP+TLS is disabled
     LDAP server = "ldap://xxxxxxxxxxxxxxxxxx"
     LDAP base DN = "dc=xxxxxxxxxxxxxxxxxxxx,dc=xxxxx"
    pam_pkcs11 is disabled

     use only smartcard for login is disabled
     smartcard module = "coolkey"
     smartcard removal action = "Ignorar"
    pam_smb_auth is disabled
     SMB workgroup = "MYGROUP"
     SMB servers = ""
    pam_winbind is disabled
     SMB workgroup = "MYGROUP"
     SMB servers = ""
     SMB security = "user"
     SMB realm = ""
    pam_sss is disabled by default
    pam_cracklib is enabled (try_first_pass retry=3)
    pam_passwdqc is disabled ()
    pam_access is disabled ()
    pam_mkhomedir is disabled ()
    Always authorize local users is disabled ()
    Authenticate system accounts against network services is disabled

如果有人知道，请回答我！

对不起，我的英语很差！

Answer 1

nscd不是为缓存密码而设计的。查看sssd或帕姆_[医]粘土]

Answer 2

如果我是您，我需要创建一些与ldap "admin“用户同名的本地"admin”用户。

因为如果ldap/winbind服务不可用，或者某些特殊的场景(如维护模式)非常危险，我可能会遇到ldap/winbind authen的巨大问题。