Skip to content

users: Add diagnostics check for nslcd, nsswitch config

James Valleroy requested to merge jvalleroy/freedombox:users-ldap-config-diagnostics into master

This adds 6 new diagnostics, focusing on configs that could be changed to incorrect values through debconf prompts.

In case this has too much detail, we could combine related diagnostics into a single item.

Tests:

  • Change the values of uri, base, and sasl_mech in /etc/nslcd.conf. Confirm that the diagnostics are failing.

  • Change the values back to the original. Confirm that the diagnostics are passed.

  • Remove the uri, base, and sasl_mech lines from /etc/nslcd.conf. Confirm that the diagnostics are failing.

  • Reconfigure libnss-ldapd and disable passwd, group, shadow. Confirm that diagnostics are failing.

  • Reconfigure libnss-ldapd and enable passwd, group, shadow. Confirm that diagnostics are passed.

Signed-off-by: James Valleroy jvalleroy@mailbox.org

Merge request reports