tags 659227 + patch thanks On Wed, 2012-02-29 at 23:30 +0100, Arthur de Jong wrote: > Do you know what error messages is generated? > > I would like to avoid adding more dependencies because it would be good > if nslcd was started as early as possible to ensure that name lookups > are possible early during booting.
I understand that this problem can arise when the init script starts k5start to get a ticket. If the time is out of sync the Kerberos ticket won't be granted and authentication of nslcd to the LDAP server will fail. Attached is the patch that will make the required change. Since squeeze is frozen I will ask the release team but there are a few other changes coming so I'd rather combine them. -- -- arthur - adej...@debian.org - http://people.debian.org/~adejong --
Index: debian/nslcd.init =================================================================== --- debian/nslcd.init (revision 1710) +++ debian/nslcd.init (working copy) @@ -21,7 +21,7 @@ ### BEGIN INIT INFO # Provides: nslcd -# Required-Start: $remote_fs $syslog +# Required-Start: $remote_fs $syslog $time # Required-Stop: $remote_fs $syslog # Should-Start: $named slapd # X-Start-Before: $mail-transport-agent mail-transport-agent exim4 sendmail nullmailer masqmail citadel cron atd autofs am-utils apache2 slim wdm gdm3 xdm kdm Index: debian/changelog =================================================================== --- debian/changelog (revision 1710) +++ debian/changelog (working copy) @@ -1,3 +1,10 @@ +nss-pam-ldapd (0.8.10-2) UNRELEASED; urgency=low + + * ensure that time is set before starting k5start to ensure that Kerberos + ticket is granted (closes: #659227) + + -- Arthur de Jong <adej...@debian.org> Wed, 11 Jul 2012 21:34:33 +0200 + nss-pam-ldapd (0.8.10-1) unstable; urgency=low * New upstream release:
signature.asc
Description: This is a digitally signed message part
