[Pkg-openldap-devel] Bug#381153: slapd: Upgrade to 2.3.24-2 breaks
system when using libnss-ldap
Paul LeoNerd Evans
leonerd at leonerd.org.uk
Wed Aug 2 15:15:39 UTC 2006
Package: slapd
Version: 2.3.24-2
Severity: critical
Justification: breaks the whole system
I have users stored in LDAP, using libnss-ldap and libpam-ldap. The
upgrade process to install 2.3.24-2 tries to stop slapd, then run
"useradd" to create the required user to run as, then start it again.
Because my user list is in LDAP, this all breaks. slapd is now
unstartable.
Furthermore, no user can log in to any terminal, nor can any existing
shells "su", or "sudo". PAM-ldap becomes unusable. Fortunately for me,
root is still in /etc/{passwd,shadow}, so I was able to ssh as root to
fix it. Were that not the case, the only way out of this is a hard
reboot, passing
init=/bin/sh
to GRUB/LILO, and manually fixing things from there.
I believe this total failure of ability to log in justifies the critical
classification, but I accept that it only happens in the non-default
case of passwd/group being LDAP-based.
-- System Information:
Debian Release: testing/unstable
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.13-mh2.cel
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Versions of packages slapd depends on:
ii adduser 3.95 Add and remove users and groups
ii coreutils 5.96-5 The GNU core utilities
ii debconf [debconf-2.0] 1.5.2 Debian configuration management sy
ii libc6 2.3.6-15 GNU C Library: Shared libraries
ii libdb4.2 4.2.52-23.1 Berkeley v4.2 Database Libraries [
ii libiodbc2 3.52.4-3 iODBC Driver Manager
ii libldap-2.3-0 2.3.24-2 OpenLDAP libraries
ii libltdl3 1.5.22-4 A system independent dlopen wrappe
ii libperl5.8 5.8.8-4 Shared Perl library
ii libsasl2 2.1.19.dfsg1-0.2 Authentication abstraction library
ii libslp1 1.2.1-5 OpenSLP libraries
ii libssl0.9.8 0.9.8b-2 SSL shared libraries
ii libwrap0 7.6.dbs-9 Wietse Venema's TCP wrappers libra
ii perl [libmime-base64-pe 5.8.8-4 Larry Wall's Practical Extraction
ii psmisc 22.2-1 Utilities that use the proc filesy
Versions of packages slapd recommends:
ii db4.2-util 4.2.52-23.1 Berkeley v4.2 Database Utilities
ii libsasl2-modules 2.1.19.dfsg1-0.2 Pluggable Authentication Modules f
-- debconf information excluded
More information about the Pkg-openldap-devel
mailing list