Bug 636656
| Summary: | The nss_ldap module fails directly after server connection has been lost | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 5 | Reporter: | Dmitri Pal <dpal> |
| Component: | sssd | Assignee: | Stephen Gallagher <sgallagh> |
| Status: | CLOSED ERRATA | QA Contact: | Chandrasekar Kannan <ckannan> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 5.2 | CC: | astrand, benl, dpal, grajaiya, jgalipea, jplans, ossman, sean |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | sssd-1.2.1-27.1.el5 | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 470003 | Environment: | |
| Last Closed: | 2011-01-13 22:37:06 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 470003 | ||
| Bug Blocks: | |||
|
Comment 2
Dmitri Pal
2010-09-22 21:00:31 UTC
Please add steps to verify the setup and verification of this bug. Attachment 322527 [details] on bug 470003 has a test case: "Reproduce by starting test case and then restarting the LDAP server while getpwnam-twice is sleeping. The next getpwnam() call will fail." (In reply to comment #6) > Attachment 322527 [details] on bug 470003 has a test case: > > "Reproduce by starting test case and then restarting the LDAP server while > getpwnam-twice is sleeping. The next getpwnam() call will fail." Did you use SSSD? This bug is a clone to address the issue in SSSD or better say to make sure that SSSD does not have an issue. Ah, sorry no. As bug 470003 was closed as duplicate, I assumed it was the same component. The summary also refers to nss_ldap, not sssd. Should we interpret the fact that bug 470003 is closed this way as nss_ldap no longer being supported on RHEL 5 and everyone should switch to sssd? That seems a bit harsh given that RHEL 5 is supposed to be very stable component-wise. nss_ldap is broken in many ways. It lacks a lot of the functionality related to connectivity, caching, fail over etc. SSSD is the component that was added to address all these troubles. nss_ldap is still supported and will be but rather than enhancing it we would prefer investing into SSSD. If there is a clear bug in nss_ldap we will definitely fix it. But this issue IMO is on the boundary of the bug/enhancement that is why we suggest evaluating SSSD. An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHEA-2011-0044.html |