http://defect.opensolaris.org/bz/show_bug.cgi?id=12567


amaguire <alan.maguire at sun.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|CAUSEKNOWN                  |FIXINPROGRESS
            Summary|[RC5] after switching to    |[RC5] after switching to
                   |User profile all interfaces |User profile all interfaces
                   |are offine                  |are offine due to startd
                   |                            |nameservices-related hang


--- Comment #19 from amaguire <alan.maguire at sun.com> 2009-11-13 16:31:20 UTC 
---
(In reply to comment #18)

> I've found a way of bypassing the supplemental group lookup - if we explicitly
> set the supp_groups property in the method_context for the start/stop/refresh
> methods to 'netadm' we bypass this checking, since the code that runs
> initgroups() is only executed if the number of supplemental groups is -1
> (unset). So I think we need to do the following to stop the NIS lookup hangs 
> in
> startd:
> 
> 1. add project=default to netadm/netcfg users in user_attr
> 2. add supp_groups astring value set to 'netadm' to the method contexts of 
> nwam
> and location:default, since both these run as non-root user, preventing
> fallback to NIS to retrieve supplemental group data.
> 
> In addition, we should probably make some other changes we've discussed:
> 
> 3. in do_ns() in net-loc, copy nsswitch.files to nsswitch.conf prior to
> disabling active name services
> 4. if no IP NCUs are up, activate NoNet
> 
> ...and should investigate excessive refreshes of network/location.
> 
> Regarding nis/client going into maintenance, I don't see that anymore - it
> happened due to my messing with the stop method and forgetting to set it back
> to the original value.

1-4 fix things for Anurag and I. Moving to FIXINPROGRESS and changing synopsis
to reflect root cause...

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.

Reply via email to