<!DOCTYPE html>
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<title></title>
<meta charset="utf-8">
</head>
<body>
<div class="markdown-here-wrapper">
<p style="margin-bottom: 20.4px; margin-top: 0px;">Package: slapd<br>
Version: 2.6.14+dfsg-1<br>
Severity: important<br>
Tags: patch</p>
<p style="margin-bottom: 20.4px; margin-top: 0px;">slapd:
/var/lib/ldap is not created when slapd/no_configuration is set</p>
<p style="margin-bottom: 20.4px; margin-top: 0px;">When slapd is
installed with “slapd/no_configuration=true” (manual
configuration, as done e.g. by the Debian Edu installer for the
main server Tjener), /var/lib/ldap is no longer created since
openldap 2.6.13+dfsg-1, breaking slapadd, slapd itself and the
Debian Edu tjener LDAP bootstrap.</p>
<p style="margin-bottom: 20.4px; margin-top: 0px;">Since
2.6.13+dfsg-1 the openldap user is created via systemd-sysusers
(debian/slapd.sysusers) instead of adduser.<br>
The previous code ran <code
style="background-color: rgba(175, 184, 193, 0.2); border-bottom-left-radius: 3px; border-bottom-right-radius: 3px; border-end-end-radius: 3px; border-end-start-radius: 3px; border-start-end-radius: 3px; border-start-start-radius: 3px; border-top-left-radius: 3px; border-top-right-radius: 3px; font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; margin-left: 2.55px; margin-right: 2.55px; padding-inline: 5.1px; padding-left: 5.1px; padding-right: 5.1px; white-space-collapse: preserve;"># adduser --system --home /var/lib/ldap --shell /bin/false ...</code>
which creates the home directory as a side effect.</p>
<p style="margin-bottom: 20.4px; margin-top: 0px;">systemd-sysusers
only sets the home directory field in the user database and does
not create the directory.</p>
<p style="margin-bottom: 20.4px; margin-top: 0px;">The postinst
only creates /var/lib/ldap via create_ldap_directories() in the
initial debconf-driven configuration path, which is skipped when
manual configuration is requested.</p>
<p style="margin-bottom: 20.4px; margin-top: 0px;">Nothing creates
the directory then, so slapadd fails with “mdb_open: cannot open
database directory /var/lib/ldap” and the Debian Edu Tjener LDAP
bootstrap aborts during installation.</p>
<h1
style="border-block-end: 2px solid rgb(119, 119, 119); border-bottom: 2px solid rgb(119, 119, 119); font-size: 27.2px; margin-bottom: 27.2px; margin-top: 35.36px;">How
to reproduce</h1>
<ol
style="margin-bottom: 20.4px; margin-top: 20.4px; padding-inline-start: 34px; padding-left: 34px;">
<li style="margin-bottom: 8.5px; margin-top: 8.5px;">
<p
style="list-style-type: decimal; margin-bottom: 8.5px; margin-top: 8.5px; text-align: left;"><code
style="background-color: rgba(175, 184, 193, 0.2); border-bottom-left-radius: 3px; border-bottom-right-radius: 3px; border-end-end-radius: 3px; border-end-start-radius: 3px; border-start-end-radius: 3px; border-start-start-radius: 3px; border-top-left-radius: 3px; border-top-right-radius: 3px; font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; list-style-type: decimal; margin-left: 2.55px; margin-right: 2.55px; padding-inline: 5.1px; padding-left: 5.1px; padding-right: 5.1px; text-align: left; white-space-collapse: preserve;"># debootstrap forky ./tmp-forky-bootstrap <a class="moz-txt-link-freetext" href="http://deb.debian.org/debian">http://deb.debian.org/debian</a></code></p>
</li>
<li style="margin-bottom: 8.5px; margin-top: 8.5px;">
<p
style="list-style-type: decimal; margin-bottom: 8.5px; margin-top: 8.5px; text-align: left;"><code
style="background-color: rgba(175, 184, 193, 0.2); border-bottom-left-radius: 3px; border-bottom-right-radius: 3px; border-end-end-radius: 3px; border-end-start-radius: 3px; border-start-end-radius: 3px; border-start-start-radius: 3px; border-top-left-radius: 3px; border-top-right-radius: 3px; font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; list-style-type: decimal; margin-left: 2.55px; margin-right: 2.55px; padding-inline: 5.1px; padding-left: 5.1px; padding-right: 5.1px; text-align: left; white-space-collapse: preserve;"># chroot ./tmp-forky-bootstrap /bin/bash</code></p>
</li>
<li style="margin-bottom: 8.5px; margin-top: 8.5px;">
<p
style="list-style-type: decimal; margin-bottom: 8.5px; margin-top: 8.5px; text-align: left;">Preseed:<br
style="list-style-type: decimal; text-align: left;">
<code
style="background-color: rgba(175, 184, 193, 0.2); border-bottom-left-radius: 3px; border-bottom-right-radius: 3px; border-end-end-radius: 3px; border-end-start-radius: 3px; border-start-end-radius: 3px; border-start-start-radius: 3px; border-top-left-radius: 3px; border-top-right-radius: 3px; font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; list-style-type: decimal; margin-left: 2.55px; margin-right: 2.55px; padding-inline: 5.1px; padding-left: 5.1px; padding-right: 5.1px; text-align: left; white-space-collapse: preserve;"># echo "slapd slapd/no_configuration boolean true" | debconf-set-selections</code><br
style="list-style-type: decimal; text-align: left;">
(the full main-server preseed is in debian-edu-install
package at preseed-values/defaults.main-server)</p>
</li>
<li style="margin-bottom: 8.5px; margin-top: 8.5px;">
<p
style="list-style-type: decimal; margin-bottom: 8.5px; margin-top: 8.5px; text-align: left;"><code
style="background-color: rgba(175, 184, 193, 0.2); border-bottom-left-radius: 3px; border-bottom-right-radius: 3px; border-end-end-radius: 3px; border-end-start-radius: 3px; border-start-end-radius: 3px; border-start-start-radius: 3px; border-top-left-radius: 3px; border-top-right-radius: 3px; font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; list-style-type: decimal; margin-left: 2.55px; margin-right: 2.55px; padding-inline: 5.1px; padding-left: 5.1px; padding-right: 5.1px; text-align: left; white-space-collapse: preserve;"># DEBIAN_FRONTEND=noninteractive apt-get install -y slapd</code></p>
</li>
<li style="margin-bottom: 8.5px; margin-top: 8.5px;">
<p
style="list-style-type: decimal; margin-bottom: 8.5px; margin-top: 8.5px; text-align: left;"><code
style="background-color: rgba(175, 184, 193, 0.2); border-bottom-left-radius: 3px; border-bottom-right-radius: 3px; border-end-end-radius: 3px; border-end-start-radius: 3px; border-start-end-radius: 3px; border-start-start-radius: 3px; border-top-left-radius: 3px; border-top-right-radius: 3px; font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; list-style-type: decimal; margin-left: 2.55px; margin-right: 2.55px; padding-inline: 5.1px; padding-left: 5.1px; padding-right: 5.1px; text-align: left; white-space-collapse: preserve;"># ls -ld /var/lib/ldap</code>
# -> No such file or directory</p>
</li>
</ol>
<p style="margin-bottom: 20.4px; margin-top: 0px;">With
2.6.10+dfsg-1 (trixie) the directory exists after installation
(created by adduser), so this is a regression introduced by
2.6.13+dfsg-1.</p>
<pre class="moz-signature" cols="0"
style="font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; line-height: 20.4px; margin-bottom: 20.4px; margin-top: 20.4px;">--
Daniel Teichmann
DAS-NETZWERKTEAM
Telefon: 0176 322 774 51
GnuPG Key ID: ED9F2F7A36E0D99349CC1940B500EFC78100A778
<a class="moz-txt-link-abbreviated" href="mailto:daniel.teichmann@das-netzwerkteam.de">daniel.teichmann@das-netzwerkteam.de</a>, <a class="moz-txt-link-freetext" href="https://das-netzwerkteam.de">https://das-netzwerkteam.de</a></pre>
</div>
<div class="mdhr-raw"
style="height:0;width:0;max-height:0;max-width:0;overflow:hidden;font-size:0;padding:0;margin:0;"
aria-hidden="true"
title="MDH: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">​</div>
</body>
</html>