Package: libnss-ldap
Version: 259-1
Severity: normal

The expected behavior of libnss-ldap is that at the end of the group
list getgrent() returns NULL and leaves errno unchanged. How libnss-ldap
actually behaves is that getgrent() returns NULL and errno is set to
ENOENT. This results in problems for a few programs like id becaues
getgrent() is not behaving as documented in the manpages.

# id -a root
uid=0(root) gid=0(root)id: failed to get groups for user `root': No such
file or directory

This is also a problem with getpwent() and presumably the rest of the
calls of a similar nature that can fall back to libnss-ldap. I also have
a hunch that this is the underlying cause of bug #427497 but I can't
duplicate that specific behavior to check.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.22-3-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libnss-ldap depends on:
ii  debconf [debconf-2.0] 1.5.19             Debian configuration management sy
ii  libc6                 2.7-8              GNU C Library: Shared libraries
ii  libcomerr2            1.40.6-1           common error description library
ii  libkrb53              1.6.dfsg.3~beta1-3 MIT Kerberos runtime libraries
ii  libldap-2.4-2         2.4.7-5            OpenLDAP libraries
ii  libsasl2-2            2.1.22.dfsg1-18    Cyrus SASL - authentication abstra

Versions of packages libnss-ldap recommends:
ii  libpam-ldap                   184-3      Pluggable Authentication Module al
pn  nscd                          <none>     (no description available)

-- debconf information:
* libnss-ldap/dblogin: false
  libnss-ldap/override: true
* shared/ldapns/base-dn: dc=setec
* shared/ldapns/ldap-server: ldap
* libnss-ldap/confperm: false
* libnss-ldap/rootbinddn: cn=manager,dc=example,dc=net
* shared/ldapns/ldap_version: 3
  libnss-ldap/binddn: cn=proxyuser,dc=example,dc=net
* libnss-ldap/nsswitch:
* libnss-ldap/dbrootlogin: true



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to