Bug 453372

Summary:	users cannot login on console, cfengine hangs
Product:	Red Hat Enterprise Linux 5	Reporter:	bugreports2005
Component:	nss_ldap	Assignee:	Nalin Dahyabhai <nalin>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	low
Version:	5.2	CC:	jplans
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	253-13	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2010-04-01 17:20:02 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description bugreports2005 2008-06-30 08:17:00 UTC

RHEL 5.2 and the included nss_ldap-253-12 brought us two issues that disappear
if /lib/libnss_ldap-2.5.so is replaced with the one taken from 5.1.

The first issue is that while users can log on through gdm or ssh, they cannot
login on the console. Or rather, something throws them out the moment they do, I
can see Last login: line and motd flash past as the screen clears and displays a
new login prompt.

Root, with its details stored locally, can log on to console but a local test
user that I created got the same problem as the users in ldap.

The other issue that is probably related - because replacing the library makes
it disappear - is that our cfengine has started to hang with SIGPIPE when doing
locking for its operations. We use cfengine for a lot of things, so this is
hugely inconvenient.

Where ldap appears in our /etc/nsswitch.conf:

passwd:      files ldap
shadow:      files ldap
netgroup:    ldap 

We are also experiencing bug #448016 or something similar (which is fixed by
replacing the library) and #448016 which is not - but still sounds like it could
be related somehow.

Comment 1 bugreports2005 2008-08-04 09:25:27 UTC

This issue is fixed by nss_ldap-253-13.el5_2.1.
I suppose the bug can be closed.

Comment 2 Nalin Dahyabhai 2010-04-01 17:20:02 UTC

Sorry for the delay here.  Closing.