Description of problem: The nss_compat NSS module only supports NIS and NIS+ as the source for expanding "+" and "-" lines in the password file. We are using a global account database based on Active Directory (through nss_ldap). This limitation of nss_compat doesn't allow us to use it. How reproducible: The following configuration in /etc/nsswitch.conf is not supported: passwd: compat ldap passwd_compat: ldap
This should work in current RHEL3 beta1 (glibc-2.3.2-58 and later). Backporting it to 2.1 is too risky.