[Pkg-shadow-devel] Bug#498635: Bug#498635: passwd: useradd -r and groupadd -r don't play nicely with ldap

[Nicolas François]

Hello,

On Thu, Sep 11, 2008 at 09:44:36AM -0700, benp at reed.edu wrote:
> 
> "useradd -r" and "groupadd -r" hang "forever" when run on a system that 

Does "forever" means "a long time" ?

(I assume you made no changes to /etc/login.defs)

Do you have a group/user ID with an high value?
Do you have a group/user ID with an high value in the 0-1000 range?
Do you have a lot of system groups/users?

Could "forever" mean doing a large number of LDAP requests?

Does it also take "forever" when you force the user or group ID?
Could you strace useradd/groupadd when it takes "forever"?

> is configured to use libnss-ldap (with ldap references for "passwd" and
> "group" in /etc/nsswitch.conf).  I use the following ldap related
> configs in nsswitch.conf:
> 
>     passwd_compat: ldap
>     group:      files ldap
>     netgroup:   files ldap
> 
> The impact of this problem can be very ugly. In the case of an etch
> to lenny upgrade, packages like libuuid1 try to create a "system"
> group necessitates killing the stalled "apt-get dist-upgrade" process.

Once it's killed, is the group created or are you able to create it
manually?

What version of libuuid1 is it?
Is it the same bug as in #487443? (http://bugs.debian.org/487443)

What groupadd command line is used?

> It'd be really really nice to resolve this before lenny's released.

I currently have no way to debug it.
I will try to see if I get some ideas based on the answers to the
questions above.

Thanks in advance,
-- 
Nekral