Issue #15000 has been updated by Zach Leslie.

Status changed from Unreviewed to Needs More Information

Surely the answer to this is to write the ldap.conf before you write the 
nsswitch.conf.  What would you say the correct behavior for puppet in this 
circumstance?
----------------------------------------
Bug #15000: Puppet doesn't handle LDAP being defective
https://projects.puppetlabs.com/issues/15000#change-65397

Author: Klavs Klavsen
Status: Needs More Information
Priority: Normal
Assignee: 
Category: 
Target version: 
Affected Puppet version: 2.7.14
Keywords: 
Branch: 


If I accidently screw up my ldap config (by f.ex. having the order of nsswitch 
and ldap.conf files not forced correctly - so nsswitch.conf gets set to use 
ldap before the /etc/ldap.conf file is written) puppet hangs forever.

in strace it seems it keeps trying to do a getuid call - which times out due to 
the ldap issue.

IMHO puppet should NOT hang on a missing getuid - as this means, it's fairly 
easy to accidently screw your setup and have to manually go to each machine :(

This is an issue on Red Hat 5 (and probably CentOS 5 as well) which uses 
nss_ldap.


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to