
I restarted it, but when it booted, the LDAP users couldn't login any more. After lots of investigation, I found that I must change the /etc/nsswitch.conf and /etc/libnss-ldap.conf and /etc/ldap/ldap.conf to their previous settings! I don't know why Debian change my configuration file. I didn't expect this work from Debian security team.
Fortunately , the server is now OK. I've an I idea about upgrading the old FreeBSD machine in the Department to a new one (FreeBSD 6.3). I think FreeBSD is great. Debian is for lazy administrators and I don't wanna be a lazy admin ;)