Re: slapd breaks NSS, NSS breaks slapd

[Ralf Haferkamp <rhafer@suse.de>]

On Montag, 11. August 2008, Emmanuel Dreyfus wrote:
> Howard Chu <hyc@symas.com> wrote:
> > Get a gdb backtrace of the hang.
> >
> > Show us your nsswitch.conf...
>
> Here is nsswitch.conf:
> group:          files ldap
> group_compat:   nis
> hosts:          files dns
> netgroup:       files [notfound=return] nis
> networks:       files
> passwd:         files ldap
> passwd_compat:  nis
> shells:         files
>
> user slapd and group ldap are resloved locally:
> in /etc/passwd
> slapd:*:402:497:openldap-server slapd user:/nonexistent:/sbin/nologin
>
> in /etc/group
> ldap:*:497:
>
> $ id slapd
> uid=402(slapd) gid=497(ldap) groups=497(ldap)
> Here is the backtrace (the bottom is not very helpful, but
> fortunately there is only one occurence of initgroups in slapd
> sources)
As it seems to hang in the initgroups call, does it help to add:
nss_initgroups_ignoreusers root,slapd
to your nss_ldap configuration?

> #0  0xbb7d6167 in poll () from /lib/libc.so.12
> #1  0xbb89ce49 in poll () from /usr/lib/libpthread.so.0
> #2  0xbbbd002d in ldap_int_poll () from
> /usr/pkg/lib/libldap_r-2.4.so.2 #3  0xbbbd0632 in
> ldap_connect_to_host () from
> /usr/pkg/lib/libldap_r-2.4.so.2
> #4  0xbbbbbffe in ldap_int_open_connection ()
>    from /usr/pkg/lib/libldap_r-2.4.so.2
> #5  0xbbbce04d in ldap_new_connection () from
> /usr/pkg/lib/libldap_r-2.4.so.2
> #6  0xbbbbbf27 in ldap_open_defconn () from
> /usr/pkg/lib/libldap_r-2.4.so.2
> #7  0xbbbcea73 in ldap_send_initial_request ()
>    from /usr/pkg/lib/libldap_r-2.4.so.2
> #8  0xbbbc4fe5 in ldap_sasl_bind () from
> /usr/pkg/lib/libldap_r-2.4.so.2 #9  0xbbbc5433 in ldap_simple_bind ()
> from
> /usr/pkg/lib/libldap_r-2.4.so.2
> #10 0xbb753bc7 in _nss_ldap_init () from /usr/lib/nss_ldap.so.0
> #11 0xbb755857 in _nss_ldap_ent_context_init_locked ()
>    from /usr/lib/nss_ldap.so.0
> #12 0xbb755cc3 in _nss_ldap_search () from /usr/lib/nss_ldap.so.0
> #13 0xbb755f68 in _nss_ldap_getent_ex () from /usr/lib/nss_ldap.so.0
> #14 0xbb757c69 in _nss_ldap_initgroups_dyn () from
> /usr/lib/nss_ldap.so.0
> #15 0xbb75e614 in _nss_ldap_mergeconfigfromdns () from
> /usr/lib/nss_ldap.so.0
> #16 0xbb84d8b6 in nsdispatch () from /lib/libc.so.12
> #17 0xbb81a0c8 in getgroupmembership () from /lib/libc.so.12
> #18 0xbb7fd572 in getgrouplist () from /lib/libc.so.12
> #19 0xbb7fb4f2 in initgroups () from /lib/libc.so.12
[..]



-- 
Ralf