[Touch-packages] [Bug 1452087] Re: slapd [or its init script] does not create necessary directory for nssov socket and fails to start

** Changed in: openldap (Ubuntu) Status: New = Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.net/bugs/1452087 Title: slapd [or its init script] does not create

[Touch-packages] [Bug 1452087] Re: slapd [or its init script] does not create necessary directory for nssov socket and fails to start

Thinking about it again, an upstream fix for this is unlikely. slapd changes users before it even starts loading its config, so there probably isn't any way for nssov to mkdir as root. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is

[Touch-packages] [Bug 1452087] Re: slapd [or its init script] does not create necessary directory for nssov socket and fails to start

there was an apparmor message logged: May 6 22:52:05 server kernel: audit: type=1400 audit(1430967118.381:12): apparmor=DENIED operation=mkdir profile=/usr/sbin/slapd name=/run/nslcd/ pid=1419 comm=slapd requested_mask=c denied_mask=c fsuid=108 ouid=108 adding to

[Touch-packages] [Bug 1452087] Re: slapd [or its init script] does not create necessary directory for nssov socket and fails to start

Can you check /var/log/kern.log to see if this is an apparmor issue? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.net/bugs/1452087 Title: slapd [or its init script] does not

[Touch-packages] [Bug 1452087] Re: slapd [or its init script] does not create necessary directory for nssov socket and fails to start

IIRC slapd does try to create the directory, but it's already switched users by that point, so doesn't have sufficient privileges. http://bazaar.launchpad.net/~ubuntu- branches/ubuntu/vivid/openldap/vivid/view/head:/contrib/slapd- modules/nssov/nssov.c#L808 I don't know whether the overlay has a