[nssldap] Login problem, when ldap servers are not available

["Markus Moeller" <huaraz [at] moeller.plus.com>]

I have problems with login on the console as root when the network is down. 
After password verification it halts and the I get a timeout and get 
disconnected.

I am running Suse SLES 10 with:

ldap.conf

uri ldaps://ldapserver1 ldaps://ldapserver2
base ou=posix,dc=example,dc=com
ldap_version 3
binddn uid=admin,dc=example,dc=com
bindpw admin
timelimit 10
bind_timelimit 2
pam_password md5
nss_map_attribute      uidnumber userid
nss_initgroups_ignoreusers root,ntp,nobody
tls_reqcert allow


nsswitch.conf

passwd: files ldap
group:  files ldap
hosts:          files dns
networks:       files dns
services:       files
protocols:      files
rpc:            files
ethers:         files
netmasks:       files
netgroup:       files
publickey:      files
bootparams:     files
automount:      files
aliases:        files


I would have thought if the servers are unavailable nsswitch will continue 
immediatly or is it querying 3 times per server with max 10 seconds = 
60seconds ?

I can login when I disable ldap in nsswitch.conf.

What would be the recommended setup ?

Thank you
Markus