Subject: firestarter breaks nis
Package: firestarter
Version: 1.0.3-1.1
Severity: critical
Justification: breaks unrelated software
Tags: patch

*** Please type your report below this line ***
Installation of firestarter breaks nis.

We have as configuration a nis server on a private network. Firestarter is installed and options are set to allow all conections on that private network. The nis clients are set up with default debian configuration (+ lines are added manually to /etc/passwd etc. as described in the documentation to nis).

nis doesn't work; ie. a running nis still works, but when the system is restarted nis breaks:

student2:/etc# /etc/init.d/nis restart
Starting NIS services: ypbind [binding to YP server .......... backgrounded]

nis doesn't work and displays:

YPBINDPROC_DOMAIN: Domain not bound

Noone can any longer login into the system via nis.
No information whatever is displayed in events or other in firestarter, that any connection was refused or else.

Stopping the firewall, everything is working again:

student2:~# /etc/init.d/firestarter stop
Stopping the Firestarter firewall:done.
student2:~# /etc/init.d/nis restart
Starting NIS services: ypbind

Unfortunately, it took me some months to locate this problem: whenever nis is started BEFORE firestarter it continues to work; the problem only occurs, when nis is started AFTER firestarter (eg. after the next reboot). Furthermore, no hints are found in firestarter's events list or in the log-files. I suspect that other services apart from nis might be affected as well.

WORKAROUND:
add the line

domain name_of_nis-domain server 192.168.0.xxx

to the configuration file /etc/yp.conf and nis is working as expected:

student2:/etc# /etc/init.d/nis restart
Starting NIS services: ypbind

Please, keep improving that otherwise very useful and easy-to-set-up application!

Johannes

-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.8-lpw
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages firestarter depends on:
ii  gksu               1.2.5-3               graphical frontend to su
ii iptables 1.2.11-10 Linux kernel 2.4+ iptables adminis ii libart-2.0-2 2.3.17-1 Library of functions for 2D graphi
ii  libatk1.0-0        1.8.0-4               The ATK accessibility toolkit
ii libaudiofile0 0.2.6-6 Open-source version of SGI's audio
ii  libbonobo2-0       2.8.1-2               Bonobo CORBA interfaces library
ii  libbonoboui2-0     2.8.1-2               The Bonobo UI library
ii libc6 2.3.2.ds1-22 GNU C Library: Shared libraries an ii libesd0 0.2.35-2 Enlightened Sound Daemon - Shared ii libgconf2-4 2.8.1-6 GNOME configuration database syste ii libgcrypt11 1.2.0-11.1 LGPL Crypto library - runtime libr ii libglade2-0 1:2.4.2-2 library to load .glade files at ru
ii  libglib2.0-0       2.6.4-1               The GLib library of C routines
ii  libgnome-keyring0  0.4.2-1               GNOME keyring services library
ii libgnome2-0 2.8.1-2 The GNOME 2 library - runtime file ii libgnomecanvas2-0 2.8.0-1 A powerful object-oriented display ii libgnomeui-0 2.8.1-3 The GNOME 2 libraries (User Interf ii libgnomevfs2-0 2.8.4-4 The GNOME virtual file-system libr ii libgnutls11 1.0.16-13.1 GNU TLS library - runtime library ii libgpg-error0 1.0-1 library for common error values an ii libgtk2.0-0 2.6.4-3 The GTK+ graphical user interface
ii  libice6            4.3.0.dfsg.1-14sarge1 Inter-Client Exchange library
ii libjpeg62 6b-10 The Independent JPEG Group's JPEG ii liborbit2 1:2.12.2-1 libraries for ORBit2 - a CORBA ORB ii libpango1.0-0 1.8.1-1 Layout and rendering of internatio ii libpopt0 1.7-5 lib for parsing cmdline parameters ii libsm6 4.3.0.dfsg.1-14sarge1 X Window System Session Management ii libtasn1-2 0.2.10-3 Manage ASN.1 structures (runtime) ii libx11-6 4.3.0.dfsg.1-14sarge1 X Window System protocol client li
ii  libxml2            2.6.16-7              GNOME XML library
ii xlibs 4.3.0.dfsg.1-14sarge1 X Keyboard Extension (XKB) configu
ii  zlib1g             1:1.2.2-4.sarge.2     compression library - runtime

-- no debconf information


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to