Bug 447881
Summary: | nss_ldap security update breaks bash | ||
---|---|---|---|
Product: | Red Hat Enterprise Linux 5 | Reporter: | Frode Nordahl <frode> |
Component: | nss_ldap | Assignee: | Nalin Dahyabhai <nalin> |
Status: | CLOSED DUPLICATE | QA Contact: | |
Severity: | urgent | Docs Contact: | |
Priority: | low | ||
Version: | 5.2 | CC: | dchuha, jplans, redhat, rh-bugzilla |
Target Milestone: | rc | ||
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2008-05-28 22:09:48 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Frode Nordahl
2008-05-22 09:54:32 UTC
I can confirm this after upgrading to nss_ldap-253-12.el5. It also appears that running nscd will work around the problem until the issue is resolved. In our environment, running nscd will allow for logins, but does not allow for su. I'm having similar issues. After upgrading to RHEL 5.2, ordinary users can no longer log in (X or console), although authentication seems to succeed. A look at /var/log/secure shows the session open, then immediately close. Logging in remotely via ssh produces an interactive session, but almost any shell command I try (tcsh in this case) results in a "Broken pipe" error message. Clients are configured to use ldaps to connect to the directory server. Downgrading the configuration to use plain ldap fixes the problem. Downgrading to nss_ldap-253-5.el5 also fixes the problem. |