Back to bug 1316580

Who When What Removed Added
Noriko Hosoi 2016-03-17 15:48:23 UTC Doc Type Bug Fix Deprecated Functionality
Red Hat Bugzilla 2016-03-17 15:48:23 UTC Doc Type Deprecated Functionality Bug Fix
wibrown 2016-03-30 23:44:47 UTC CC wibrown
Noriko Hosoi 2016-04-07 18:45:47 UTC Depends On 1324983
wibrown 2016-04-11 21:42:48 UTC Status NEW POST
Noriko Hosoi 2016-04-12 22:51:16 UTC Depends On 1322167
Noriko Hosoi 2016-04-20 21:29:47 UTC Priority unspecified high
Severity unspecified high
Noriko Hosoi 2016-05-04 19:48:01 UTC Status POST MODIFIED
Fixed In Version 389-ds-base-1.3.5.2-1.el7
errata-xmlrpc 2016-05-04 20:08:53 UTC Status MODIFIED ON_QA
Viktor Ashirov 2016-06-08 15:10:42 UTC Status ON_QA VERIFIED
Viktor Ashirov 2016-07-28 17:51:36 UTC Status VERIFIED ASSIGNED
Assignee nhosoi wibrown
Petr Bokoc 2016-08-01 15:54:44 UTC CC pbokoc
Docs Contact pbokoc
Noriko Hosoi 2016-08-04 01:10:35 UTC Status ASSIGNED POST
CC nhosoi
Noriko Hosoi 2016-08-04 21:02:02 UTC Status POST MODIFIED
Fixed In Version 389-ds-base-1.3.5.2-1.el7 389-ds-base-1.3.5.10-6.el7
Noriko Hosoi 2016-08-04 21:23:50 UTC Status MODIFIED ON_QA
Viktor Ashirov 2016-08-05 07:12:12 UTC Keywords Regression, TestBlocker
Status ON_QA ASSIGNED
Petr Vobornik 2016-08-05 14:35:10 UTC CC pvoborni
Noriko Hosoi 2016-08-05 15:40:08 UTC Priority high urgent
Severity high urgent
Viktor Ashirov 2016-08-08 03:50:55 UTC CC sramling
Noriko Hosoi 2016-08-08 18:15:30 UTC Status ASSIGNED MODIFIED
Fixed In Version 389-ds-base-1.3.5.10-6.el7 389-ds-base-1.3.5.10-7.el7
Noriko Hosoi 2016-08-08 18:21:58 UTC Status MODIFIED ON_QA
Kaleem 2016-08-09 13:07:15 UTC CC ksiddiqu
Scott Poore 2016-08-10 23:47:50 UTC CC spoore
Noriko Hosoi 2016-08-11 15:26:56 UTC CC jpazdziora
Noriko Hosoi 2016-08-15 16:23:49 UTC Flags needinfo?(wibrown)
wibrown 2016-08-16 00:42:03 UTC Doc Text Cause: Moving from EL6 to EL7, the init service was replaced with systemd. Systemd operates in a fundamentally different manner to init, especially in how ttys are managed. init would connect stdout and stdin of the daemon to the tty as the service started, allowing the password prompt to operate correctly. systemd captures stdin and stdout for it's own purpose.

Consequence: When a pin.txt was not available, ns-slapd would attempt to prompt for a pin via stdout / stdin. As systemd captures these, the prompt was not accessible. This led to ns-slapd being unable to start.

Fix: systemd offers a mechanism to collect secrets from administrators during a service start. This is the systemd ask password api. ns-slapd will detect the presence of systemd during startup, and will attempt to use this api if required.

Result: ns-slapd can now be started without a pin.txt in cases where the administrator wants to keep nssdb passwords away from the system.
Flags needinfo?(wibrown)
Viktor Ashirov 2016-08-26 11:49:00 UTC Status ON_QA VERIFIED
German Parente 2016-09-21 17:15:43 UTC CC gparente
German Parente 2016-09-23 08:35:50 UTC Flags needinfo?(nhosoi)
Noriko Hosoi 2016-09-23 17:10:57 UTC Flags needinfo?(nhosoi) needinfo?(wibrown)
wibrown 2016-09-25 20:57:40 UTC Flags needinfo?(wibrown)
Petr Bokoc 2016-10-06 10:40:02 UTC Doc Text Cause: Moving from EL6 to EL7, the init service was replaced with systemd. Systemd operates in a fundamentally different manner to init, especially in how ttys are managed. init would connect stdout and stdin of the daemon to the tty as the service started, allowing the password prompt to operate correctly. systemd captures stdin and stdout for it's own purpose.

Consequence: When a pin.txt was not available, ns-slapd would attempt to prompt for a pin via stdout / stdin. As systemd captures these, the prompt was not accessible. This led to ns-slapd being unable to start.

Fix: systemd offers a mechanism to collect secrets from administrators during a service start. This is the systemd ask password api. ns-slapd will detect the presence of systemd during startup, and will attempt to use this api if required.

Result: ns-slapd can now be started without a pin.txt in cases where the administrator wants to keep nssdb passwords away from the system.
*ns-slapd* now correctly prompts for a pin when the `pin.txt` file is not found

In previous releases, _389-ds-base_ did not display a prompt asking for a pin if the `pin.txt` file was not found, due to the fact that *systemd* captures standard input and output which _389-ds-base_ was attempting to use. With this update, _389-ds-base_ detects whether *systemd* is running on the system during startup, and uses the correct *systemd* API to display the password prompt if required. Directory Server can therefore be started without a `pin.txt` file, which allows administrators to keep *nssdb* passwords away from the system.
errata-xmlrpc 2016-11-02 12:25:18 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2016-11-03 20:40:19 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2016-11-03 16:40:19 UTC
Tru Huynh 2017-07-31 08:09:03 UTC CC tru
Simon Pichugin 2020-09-13 21:39:15 UTC Link ID Github 389ds/389-ds-base/issues/1772

Back to bug 1316580