> I'd probably argue that nss_ldap is fundamentally unfixable. Why *not* get > behind sssd? Have you given a recent version a try? > > jh Understandable, but since a lot of people are still going to stick with CentOS 4/5 for legacy reasons, I would argue that nss_ldap is still worth "fixing". It's not as fancy as sssd of course, but it's what people are using right now. :-) Regards, Mattias