Public bug reported:

Binary package hint: update-manager

The following version info is from AFTER the upgrade:

r...@access:~# lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 10.04 LTS
Release:        10.04
Codename:       lucid


At several points during an upgrade from Ubuntu karmic to lucid, many
services are restarted. Unfortunately, update-manager appears to make no
effort to protect services currently required for core system
functionality from being stopped, and it can hang at these points until
those services are manually restarted by the admin.

In my case, the problem service is slapd, because the system being
upgraded is the LDAP master and it uses libpam-ldap and libnss-ldap (via
the ldap-auth-client package) to do local authentication. If slapd is
stopped, things tend to go very pear-shaped very fast with long timeouts
and/or failures on system calls involving the nss subsystem.

The same issue probably arises with other authentication mechanisms that
rely on daemons that may be running locally.

I noticed the upgrade "hang" after udev was updated and after libstdc++
was upgraded. In both cases ssh became non-responsive as did most other
things. I had a local root console already open for just this situation,
so I was able to restart slapd and get on with the install, but if I
hand't been things could've been rather problematic

I'm sure there are other packages that may restart things at inopportune
times, or stop them and expect something else to start them well down
the track rather than restarting them on the spot.

One possible solution to this is to give the nss-ldap and nss-pam
packages a way to protect slapd from being stopped during package
installation, so it's only restarted momentarily at the end of the
upgrade and when it its self is upgraded.

Alternately, disabling ldap etc auth via nssswitch.conf during the
upgrade would work. update-manager would need to make sure that the core
system users and groups were still in /etc/passwd and /etc/group though,
as if the admin's moved them to the external auth source then disabling
that auth source would not go well.


More package info:

r...@access:~# apt-cache policy libpam-ldap libnss-ldap slapd ldap-auth-config 
ldap-auth-client update-manager update-manager-core 
libpam-ldap:
  Installed: 184-8ubuntu1
  Candidate: 184-8.2ubuntu1
  Version table:
     184-8.2ubuntu1 0
        500 http://ftp.iinet.net.au/pub/ubuntu/ lucid/main Packages
        500 http://au.archive.ubuntu.com/ubuntu/ lucid/main Packages
 *** 184-8ubuntu1 0
        100 /var/lib/dpkg/status
libnss-ldap:
  Installed: 261-2.1ubuntu4
  Candidate: 264-2ubuntu2
  Version table:
     264-2ubuntu2 0
        500 http://ftp.iinet.net.au/pub/ubuntu/ lucid/main Packages
        500 http://au.archive.ubuntu.com/ubuntu/ lucid/main Packages
 *** 261-2.1ubuntu4 0
        100 /var/lib/dpkg/status
slapd:
  Installed: 2.4.21-0ubuntu5
  Candidate: 2.4.21-0ubuntu5
  Version table:
 *** 2.4.21-0ubuntu5 0
        500 http://ftp.iinet.net.au/pub/ubuntu/ lucid/main Packages
        500 http://au.archive.ubuntu.com/ubuntu/ lucid/main Packages
        100 /var/lib/dpkg/status
ldap-auth-config:
  Installed: 0.5.2
  Candidate: 0.5.2
  Version table:
 *** 0.5.2 0
        500 http://ftp.iinet.net.au/pub/ubuntu/ lucid/main Packages
        500 http://au.archive.ubuntu.com/ubuntu/ lucid/main Packages
        100 /var/lib/dpkg/status
ldap-auth-client:
  Installed: 0.5.2
  Candidate: 0.5.2
  Version table:
 *** 0.5.2 0
        500 http://ftp.iinet.net.au/pub/ubuntu/ lucid/main Packages
        500 http://au.archive.ubuntu.com/ubuntu/ lucid/main Packages
        100 /var/lib/dpkg/status
update-manager:
  Installed: (none)
  Candidate: 1:0.134.7
  Version table:
     1:0.134.7 0
        500 http://ftp.iinet.net.au/pub/ubuntu/ lucid/main Packages
        500 http://au.archive.ubuntu.com/ubuntu/ lucid/main Packages
update-manager-core:
  Installed: 1:0.126.9
  Candidate: 1:0.134.7
  Version table:
     1:0.134.7 0
        500 http://ftp.iinet.net.au/pub/ubuntu/ lucid/main Packages
        500 http://au.archive.ubuntu.com/ubuntu/ lucid/main Packages
 *** 1:0.126.9 0
        100 /var/lib/dpkg/status

** Affects: update-manager (Ubuntu)
     Importance: Undecided
         Status: New

-- 
update-manager doesn't prevent restart of slapd on system using ldap auth, 
resulting in hung update
https://bugs.launchpad.net/bugs/572105
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to