Description of problem:

After update from centos 5.7 to 5.8, /var/log/message full of nss_ldap: failed to bind to LDAP server
aditionnaly i have found that "getent passwd" didn't show the account on the ldap after the on in /etc/passwd 
BUT 
"getent passwd <a user>" work as in 5.7

I'm using Zimbra 7 ldap on the same server as described :
http://wiki.zimbra.com/wiki/UNIX_and_Windows_Accounts_in_Zimbra_LDAP_and_Zimbra_Admin_UI
all is done by code…


Version-Release number of selected component (if applicable):
Centos 5.8
Zimbra 7

How reproducible:

I have seen on numbers servers
  
Additional info:

The answer is to shut down nscd
/etc/init.d/nscd stop

put a wrong password in 
/etc/ldap.secret

try (this one should not work)
getent passwd
in the logs :
failed to bind to LDAP server ldap://xxx: Invalid credentials

put the good password in 
/etc/ldap.conf

start nscd
/etc/init.d/nscd start

try (this one should work)
getent passwd


it seems that nscd store a wrong password in it's caches
…

it's the fist time i see that !

for info :
nscd-2.5-81.el5_8.1
nss_ldap-253-49.el5
nss_db-2.2-35.4.el5_5
glibc-common-2.5-81.el5_8.1
openldap-2.3.43-25.el5 (client libs ?)
zimbra-core-7.1.3_GA_3346.RHEL5-20110928134520
(openldap -> /opt/zimbra/openldap-2.4.26.5z)