Your message dated Sat, 09 May 2009 21:39:35 +0000
with message-id <[email protected]>
and subject line Bug#521617: fixed in nss-ldapd 0.6.9
has caused the Debian Bug report #521617,
regarding libnss-ldapd: "tls_reqcert never" doesn't work
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
521617: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=521617
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libnss-ldapd
Version: 0.6.8
With 0.6.7 if I have "tls_reqcert never" in /etc/ldap/ldap.conf then
nslcd can connect to my ldap servers (which unfortunately have
certificate problems and are outside of my administrative control) and
things work quite happily. The switch to 0.6.8 broke this capability
(almost surely the "clean the environment and set LDAPNOINIT" change
is responsible), even when I put "tls_reqcert never" in my
/etc/nss-ldapd.conf, which notably hasn't been well tested according
to the warning messages.
Without "tls_reqcert never" in /etc/nss-ldapd.conf I just got this:
Mar 28 03:39:41 deadhour nslcd[11653]: [6c6125] failed to bind to LDAP server
ldaps://id.sea/: Can't contact LDAP server: Operation now in progress
Mar 28 03:39:41 deadhour nslcd[11653]: [6c6125] failed to bind to LDAP server
ldaps://id3.sea/: Can't contact LDAP server: Operation now in progress
Mar 28 03:39:41 deadhour nslcd[11653]: [8c895d] failed to bind to LDAP server
ldaps://id3.sea/: Can't contact LDAP server: Operation now in progress
Mar 28 03:39:41 deadhour nslcd[11653]: [8c895d] failed to bind to LDAP server
ldaps://id4.sea/: Can't contact LDAP server: Operation now in progress
Mar 28 03:39:41 deadhour nslcd[11653]: [8c895d] no available LDAP server found,
sleeping 1 seconds
Mar 28 03:39:41 deadhour nslcd[11653]: [6c6125] failed to bind to LDAP server
ldaps://id4.sea/: Can't contact LDAP server: Operation now in progress
Mar 28 03:39:41 deadhour nslcd[11653]: [6c6125] no available LDAP server found,
sleeping 1 seconds
Mar 28 03:39:42 deadhour nslcd[11653]: [8c895d] failed to bind to LDAP server
ldaps://id1.sea/: Can't contact LDAP server: Operation now in progress
Mar 28 03:39:42 deadhour nslcd[11653]: [6c6125] failed to bind to LDAP server
ldaps://id1.sea/: Can't contact LDAP server: Operation now in progress
Mar 28 03:39:42 deadhour nslcd[11653]: [8c895d] failed to bind to LDAP server
ldaps://id2.sea/: Can't contact LDAP server: Operation now in progress
Mar 28 03:39:42 deadhour nslcd[11653]: [8c895d] no available LDAP server found,
sleeping 1 seconds
Mar 28 03:39:42 deadhour nslcd[11653]: [6c6125] failed to bind to LDAP server
ldaps://id2.sea/: Can't contact LDAP server: Operation now in progress
Mar 28 03:39:42 deadhour nslcd[11653]: [6c6125] no available LDAP server found,
sleeping 1 seconds
Mar 28 03:39:43 deadhour nslcd[11653]: [8c895d] no available LDAP server found
Mar 28 03:39:43 deadhour nslcd[11653]: [6c6125] no available LDAP server found
While I'm not surprised it couldn't establish the connection due to
not being able to verify the certs, the error message could stand to be
more informative.
After adding "tls_reqcert never" to /etc/nss-ldapd.conf the messages
changed slightly to:
Mar 28 03:41:02 deadhour nslcd[7158]: [8b4567] failed to bind to LDAP server
ldaps://id.sea/: Can't contact LDAP server: No such file or directory
Mar 28 03:41:02 deadhour nslcd[7158]: [8b4567] failed to bind to LDAP server
ldaps://id3.sea/: Can't contact LDAP server: Operation now in progress
Mar 28 03:41:02 deadhour nslcd[7158]: [8b4567] failed to bind to LDAP server
ldaps://id4.sea/: Can't contact LDAP server: Operation now in progress
Mar 28 03:41:02 deadhour nslcd[7158]: [8b4567] failed to bind to LDAP server
ldaps://id1.sea/: Can't contact LDAP server: Operation now in progress
Mar 28 03:41:02 deadhour nslcd[7158]: [8b4567] failed to bind to LDAP server
ldaps://id2.sea/: Can't contact LDAP server: Operation now in progress
Mar 28 03:41:02 deadhour nslcd[7158]: [8b4567] no available LDAP server found,
sleeping 1 seconds
Mar 28 03:41:03 deadhour nslcd[7158]: [8b4567] no available LDAP server found
Downgrading to 0.6.7 restores normal operation and things work
smoothly.
--
Jamie Heilman http://audible.transient.net/~jamie/
"Most people wouldn't know music if it came up and bit them on the ass."
-Frank Zappa
--- End Message ---
--- Begin Message ---
Source: nss-ldapd
Source-Version: 0.6.9
We believe that the bug you reported is fixed in the latest version of
nss-ldapd, which is due to be installed in the Debian FTP archive:
libnss-ldapd_0.6.9_i386.deb
to pool/main/n/nss-ldapd/libnss-ldapd_0.6.9_i386.deb
nss-ldapd_0.6.9.dsc
to pool/main/n/nss-ldapd/nss-ldapd_0.6.9.dsc
nss-ldapd_0.6.9.tar.gz
to pool/main/n/nss-ldapd/nss-ldapd_0.6.9.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Arthur de Jong <[email protected]> (supplier of updated nss-ldapd package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 09 May 2009 22:00:00 +0200
Source: nss-ldapd
Binary: libnss-ldapd
Architecture: source i386
Version: 0.6.9
Distribution: unstable
Urgency: low
Maintainer: Arthur de Jong <[email protected]>
Changed-By: Arthur de Jong <[email protected]>
Description:
libnss-ldapd - NSS module for using LDAP as a naming service
Closes: 521617 523483 525075 525085 525530 525784 526638 526757 527102 527242
527246 527327
Changes:
nss-ldapd (0.6.9) unstable; urgency=low
.
* produce more detailed logging in debug mode and allow multiple -d options
to be specified to also include logging from the LDAP library
* some LDAP configuration options are now initialized globally instead of
per connection which should fix problems with the tls_reqcert option
(closes: #521617)
* documentation improvements for the NSLCD protocol used between the NSS
module and the nslcd server
* imported the new PAM module from the OpenLDAP nssov tree by Howard Chu
(note that the PAM-related NSLCD protocol is not yet finalised and this
module is not built by default)
* in configure script allow disabling of building certain components
* fix a problem with writing alternate service names and add checks for
validity of passed buffer in NSS module (closes: #527246)
* ask the user whether LDAP should be removed from /etc/nsswitch.conf at
package removal time (closes: #523483)
* remove /var/run/nslcd on package removal
* updated Danish debconf translation by Jonas Smedegaard (closes: #525075)
* updated Japanese debconf translation by Kenshi Muto (closes: #525085)
* updated Portugese debconf translation by Américo Monteiro
(closes: #525530)
* added Italian debconf translation by Vincenzo Campanella (closes: #525784)
* updated French debconf translation by Guillaume Delacour (closes: #526638)
* updated Swedish debconf translation by Martin Ågren (closes: #526757)
* updated Russian debconf translation by Yuri Kozlov (closes: #527102)
* updated Spanish debconf translation by Francisco Javier Cuadrado
(closes: #527242)
* added Galician debconf translation by Marce Villarino (closes: #527327)
Checksums-Sha1:
3cf4c0841e581c76f0ffcf193c2264c62acbe582 983 nss-ldapd_0.6.9.dsc
213d3b9bea4cf0e313bff11f20317583f8004559 397949 nss-ldapd_0.6.9.tar.gz
672834d0e4f3f393cf5155448c6a4ea82775e22e 117700 libnss-ldapd_0.6.9_i386.deb
Checksums-Sha256:
eb21622502c97690009b2b5e1fcae2aace20379a759530eb8007ae60bb518c80 983
nss-ldapd_0.6.9.dsc
3fe42f137e4ac52cb42d65dc6b6064c6a89349075f62a9486d3e790f82ea2a09 397949
nss-ldapd_0.6.9.tar.gz
1ce990193b5b832416837ec4deb0e383708f73c133f66cb25533f702bb44c030 117700
libnss-ldapd_0.6.9_i386.deb
Files:
94a8755f82556321ea369df5413fc8b1 983 admin extra nss-ldapd_0.6.9.dsc
e92b91cda8cc2db212b5ce4cef0d9469 397949 admin extra nss-ldapd_0.6.9.tar.gz
b4f09e6bbe66ed2a2d52955e0400dd9a 117700 admin extra libnss-ldapd_0.6.9_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkoF7dkACgkQVYan35+NCKfbGwCeJ4uPieDMp1Hed7UhzrERvDkg
zwQAniHhpk6IjMuCAk90v+V+J5VJOefh
=YoIv
-----END PGP SIGNATURE-----
--- End Message ---
