[Bug 155947] Re: libnss-ldap: calls to initgroups() causes boot to hang when using 'bind_policy hard'
Is there a fix for this for 7.10? When the LDAP server is down, it hangs on klog etc. I have bind_policy soft set and it still hangs. Adding nss_initgroups_ignoreusers to my ldap.conf seems to be a workaround. -- libnss-ldap: calls to initgroups() causes boot to hang when using 'bind_policy hard' https://bugs.launchpad.net/bugs/155947 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libnss-ldap in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 155947] Re: libnss-ldap: calls to initgroups() causes boot to hang when using 'bind_policy hard'
** Changed in: libnss-ldap (Debian) Status: Unknown = Fix Released -- libnss-ldap: calls to initgroups() causes boot to hang when using 'bind_policy hard' https://bugs.launchpad.net/bugs/155947 You received this bug notification because you are a member of Ubuntu Server Team, which is a subscriber of a duplicate bug. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 155947] Re: libnss-ldap: calls to initgroups() causes boot to hang when using 'bind_policy hard'
Howdy all- An updated libnss-ldap package is available in the Hardy repos as of yesterday, containing a fix for this problem. We've tested it in our environments and it seems to solve the issue. I'm curious if anyone else out there has tried it, and if problems persist. :-Dustin -- libnss-ldap: calls to initgroups() causes boot to hang when using 'bind_policy hard' https://bugs.launchpad.net/bugs/155947 You received this bug notification because you are a member of Ubuntu Server Team, which is a subscriber of a duplicate bug. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 155947] Re: libnss-ldap: calls to initgroups() causes boot to hang when using 'bind_policy hard'
Turns out the above doesn't work out too well, as the patch depends on getpwnam_r(), a glibc function which then ends up using libnss-ldap. Tried a few things, but it didn't help the hang. A less intrusive patch will be to have an initscript run on shutdown which edits /etc/ldap.conf based on the value of nss_initgroups_minimum_uid. ** Changed in: libnss-ldap (Ubuntu) Status: Triaged = Fix Committed -- libnss-ldap: calls to initgroups() causes boot to hang when using 'bind_policy hard' https://bugs.launchpad.net/bugs/155947 You received this bug notification because you are a member of Ubuntu Server Team, which is a subscriber of a duplicate bug. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 155947] Re: libnss-ldap: calls to initgroups() causes boot to hang when using 'bind_policy hard'
This bug was fixed in the package libnss-ldap - 258-1ubuntu3 --- libnss-ldap (258-1ubuntu3) hardy; urgency=low * add nssldap-update-ignoreusers that updates nss_initgroups_ignoreusers in /etc/ldap.conf based on nss_initgroups_minimum_uid. Added initscript to call nssldap-update-ignoreusers on shutdown. Based on changes by Dustin Kirkland. Fix for LP: #155947 * References https://bugs.edge.launchpad.net/ubuntu/+source/libnss-ldap/+bug/155947 -- Jamie Strandboge [EMAIL PROTECTED] Tue, 22 Apr 2008 14:07:14 -0400 ** Changed in: libnss-ldap (Ubuntu) Status: Fix Committed = Fix Released -- libnss-ldap: calls to initgroups() causes boot to hang when using 'bind_policy hard' https://bugs.launchpad.net/bugs/155947 You received this bug notification because you are a member of Ubuntu Server Team, which is a subscriber of a duplicate bug. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 155947] Re: libnss-ldap: calls to initgroups() causes boot to hang when using 'bind_policy hard'
Updated the description and marked as triaged. ** Changed in: libnss-ldap (Ubuntu) Status: Confirmed = Triaged -- libnss-ldap: calls to initgroups() causes boot to hang when using 'bind_policy hard' https://bugs.launchpad.net/bugs/155947 You received this bug notification because you are a member of Ubuntu Server Team, which is a subscriber of a duplicate bug. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 155947] Re: libnss-ldap: calls to initgroups() causes boot to hang when using 'bind_policy hard'
How about a patch to libnss-ldap to respect an environment variable to
force soft binding? Something like 'if
(getenv(NSS_LDAP_BINDPOLICY_SOFT != 0 getuid() 100)) { /* force
soft bind regardless of ldap.conf */ }'
--
libnss-ldap: calls to initgroups() causes boot to hang when using 'bind_policy
hard'
https://bugs.launchpad.net/bugs/155947
You received this bug notification because you are a member of Ubuntu
Server Team, which is a subscriber of a duplicate bug.
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 155947] Re: libnss-ldap: calls to initgroups() causes boot to hang when using 'bind_policy hard'
Discussion on irc and phone resulted in the following solution: Add a new configuration option 'nss_initgroups_ignoreusers_below_uid' (or similar) and have it default to '1000'. This option will be configurable in /etc/ldap.conf. Admins can adjust this to be any valid uid. -- libnss-ldap: calls to initgroups() causes boot to hang when using 'bind_policy hard' https://bugs.launchpad.net/bugs/155947 You received this bug notification because you are a member of Ubuntu Server Team, which is a subscriber of a duplicate bug. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 155947] Re: libnss-ldap: calls to initgroups() causes boot to hang when using 'bind_policy hard'
Upstream started to consider this, and have a preliminary patch here: http://bugzilla.padl.com/show_bug.cgi?id=341 -- libnss-ldap: calls to initgroups() causes boot to hang when using 'bind_policy hard' https://bugs.launchpad.net/bugs/155947 You received this bug notification because you are a member of Ubuntu Server Team, which is a subscriber of a duplicate bug. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
