[Pkg-openldap-devel] r699 - openldap/trunk-2.3/debian

[Matthijs Mohlmann]

On Tue, 25 Jul 2006 15:23:34 -0700
Steve Langasek <vorlon at debian.org> wrote:

> On Tue, Jul 25, 2006 at 08:33:51PM +0000, Matthijs Mohlmann wrote:
> > Author: active2-guest
> > Date: 2006-07-25 20:33:49 +0000 (Tue, 25 Jul 2006)
> > New Revision: 699
> 
> > Modified:
> >    openldap/trunk-2.3/debian/changelog
> >    openldap/trunk-2.3/debian/slapd.postinst
> >    openldap/trunk-2.3/debian/slapd.preinst
> > Log:
> >  * Moved create_new_user to preinst. This will fix a hang with libnss-ldap.
> 
> > Modified: openldap/trunk-2.3/debian/changelog
> > ===================================================================
> > --- openldap/trunk-2.3/debian/changelog	2006-07-23 09:52:50 UTC (rev 698)
> > +++ openldap/trunk-2.3/debian/changelog	2006-07-25 20:33:49 UTC (rev 699)
> > @@ -17,8 +17,11 @@
> >    * Removed script move_files, dh_install is used instead. (Closes: #368896)
> >    * Dutch translation already updated. Closes: #375101)
> >    * Documented that slapd is compiled with TCP wrappers (Closes: #351428)
> > +  * Create a new user before slapd is stopped. It is possible that libnss-ldap
> > +    is using slapd on localhost which causes a hang in the upgrade procedure.
> > +    (Closes: #379728)
> 
> I don't think this is a correct solution at all.  Why is getent group
> hanging on this user's system?  slapd being disabled shouldn't cause this;
> it sounds to me like this is a buggy NSS configuration, probably caused by
> the new stupid upstream defaults in libnss-ldap which the Debian maintainer
> has confirmed over my objections.
> 
Ok, where did you discuss that ? If this is a problem in libnss-ldap then IMO it's still RC and should be reassigned to libnss-ldap shouldn't it ?

> NSS hanging indefinitely due to a downed server is BROKEN BROKEN BROKEN, and
> one-off workarounds for the symptoms are a disservice to our users.
> 
> Your commit is also RC-buggy, because it lacks the necessary pre-depends on
> adduser that would allow calling addgroup and adduser in the preinst, and
> you haven't discussed this on debian-devel either as required by policy
> before adding new pre-depends.
> 

Ok, I'll revert the change.
> Thanks,

Regards,

Matthijs Mohlmann
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-openldap-devel/attachments/20060726/59be3a43/signature.pgp