Bug 495515 - [RHEL5] nscd periodically fails to resolve user name.
Summary: [RHEL5] nscd periodically fails to resolve user name.
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: nss_ldap
Version: 5.3
Hardware: All
OS: Linux
low
medium
Target Milestone: rc
: ---
Assignee: Nalin Dahyabhai
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-04-13 15:58 UTC by Orion Poplawski
Modified: 2010-07-02 16:56 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-07-02 16:56:23 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Orion Poplawski 2009-04-13 15:58:37 UTC
Description of problem:

Periodically (once every couple of days) we see the following error on our webserver:

Apr 12 19:21:17 hawk sendmail[29409]: NOQUEUE: SYSERR(apache): /etc/mail/submit.cf: line 451: readcf: option TrustedUser: unknown user smmsp: No such file or directory
Apr 12 19:21:29 hawk sendmail[29410]: NOQUEUE: SYSERR(apache): /etc/mail/submit.cf: line 432: readcf: option RunAsUser: unknown user smmsp: No such file or directory
Apr 12 19:21:29 hawk sendmail[29410]: NOQUEUE: SYSERR(apache): can not write to queue directory /var/spool/clientmqueue/ (RunAsGid=0, required=51): Permission denied

This goes away if I stop running nscd.  Not sure how to proceed with debugging this...

Version-Release number of selected component (if applicable):
nscd-2.5-34

Comment 1 Buchan Milne 2009-06-26 09:17:26 UTC
Are you using LDAP for system users or groups?

E.g., can you assist in eliminating nss_ldap as the cause of bug #429702 ?

Comment 2 Orion Poplawski 2009-06-26 15:20:54 UTC
We are using LDAP, and I suspect nss_ldap is the cause, but it seems no one is willing to help debug nss_ldap.

Comment 3 Dmitri Pal 2010-07-01 17:38:59 UTC
Do you still see the problem?
The smmsp account is usually a local one. Do you have it in LDAP too?

Can you please provide additional information about your configuration:
* /etc/ldap.conf
* nsswitch.conf

Does it happen with any other account?

Comment 4 Orion Poplawski 2010-07-01 22:17:51 UTC
Actually, I haven't seen this since Sep 21 2009 which is around when we went to 5.4 (which we did on Sep 18 2009).  Perhaps that did it.

I don't have smmsp in LDAP.

I didn't see trouble with other users, but this is our web server and this would affect mail submission from squirrel mail.  Otherwise didn't see much user activity.

Feel free to close.

Comment 5 Dmitri Pal 2010-07-02 16:56:23 UTC
Closing since the problem is not reproducible any more. See comment #4.


Note You need to log in before you can comment on or make changes to this bug.