[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#7541) nssov cannot create socket directory

ryan.g.steele@gmail.com wrote:
> Full_Name: Ryan Steele
> Version: 2.4.34
> OS: Ubuntu, RedHat
> URL:
> Submission from: (NULL) (12.150.6.65)
>
>
> According to https://github.com/gcp/openldap/blob/master/contrib/slapd-modules/nssov/nssov.c#L808,
> nssov tries to create the socket/PID directory /var/run/nslcd if it does not
> exist.  However, that mkdir attempt will always fail because slapd runs as a
> non-privileged user and the permissions on /var/run are, appropriately,
> root:root and 755.  As a result, when a system using slapd+nssov is rebooted,
> slapd fails to start and user lookups thusly fail until /var/run/nslcd is
> manually created so that slapd can be started.

Nonsense. That mkdir cannot cause slapd to fail to start, since its 
success/failure result is ignored. Take this up with your distro provider if 
the directory isn't available at start time. Closing this ITS.

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/