I also had boot failures especiall on the server running slapd, when
nsswitch.conf uses nss_ldap:

passwd:         files ldap
group:          files ldap

This can be a problem when networking isn't started before certain
system processes, or the network is down at boot-up.  I added:

bind_timelimit 2
nss_reconnect_tries 4
nss_initgroups_ignoreusers root,openldap,syslog,klog

which is working well for several months.  I believe some of these
should be added to the default configuration in Hardy.  In general
system groups in LDAP don'e make sense to me, but the above exclusions
are *required* for the system running the LDAP server to boot.  Without
the above, ldap servers are basically crippled.

Unless there is a use-case for these being in LDAP, they should be
excluded by default.  If there is someone smart enough to have them LDAP
in a sane manner (doubtful for groups openldap, klog, syslog), and wants
to do so, they can likely figure out how to edit ldap.conf and remove
them.

-- 
ldap bind_policy makes it unable to start
https://bugs.launchpad.net/bugs/181005
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to