Package: nslcd Version: 0.9.7-1 Severity: normal Dear Maintainer,
Tonight I was setting up a new build server, and I happened to install nslcd before the ca-certificates package had been installed on this new machine. During installation nslcd failed to start, and I saw this error in the log: > root@aule:/# systemctl status nslcd -l > ● nslcd.service - LSB: LDAP connection daemon > Loaded: loaded (/etc/init.d/nslcd; generated; vendor preset: enabled) > Active: failed (Result: exit-code) since Mon 2016-09-05 04:29:20 UTC; 2min > 10s ago > Docs: man:systemd-sysv-generator(8) > > Sep 05 04:29:20 aule.calenhad.com systemd[1]: Starting LSB: LDAP connection > daemon... > Sep 05 04:29:20 aule.calenhad.com nslcd[1443]: Starting LDAP connection > daemon: nslcdnslcd: /etc/nslcd.conf:28: tls_cacertfile: error accessing > /etc/ssl/certs/ca-certificates.crt: No such file or directory > Sep 05 04:29:20 aule.calenhad.com nslcd[1443]: failed! > Sep 05 04:29:20 aule.calenhad.com systemd[1]: nslcd.service: Control process > exited, code=exited status=1 > Sep 05 04:29:20 aule.calenhad.com systemd[1]: Failed to start LSB: LDAP > connection daemon. > Sep 05 04:29:20 aule.calenhad.com systemd[1]: nslcd.service: Unit entered > failed state. > Sep 05 04:29:20 aule.calenhad.com systemd[1]: nslcd.service: Failed with > result 'exit-code'. Installing the ca-certificates package created the ca-certificates.crt file which is expected by the default configuration of nslcd. I also tested installing nslcd on another identically configured test server, but purposefully installed the ca-certificates package before installing nslcd. That install finished without issue. I think nslcd should recommend the ca-certificates package. Thanks, Mathias -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 4.7.2-grsec-201608211829 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages nslcd depends on: ii adduser 3.115 ii debconf [debconf-2.0] 1.5.59 ii libc6 2.23-5 ii libgssapi-krb5-2 1.14.3+dfsg-1 ii libldap-2.4-2 2.4.42+dfsg-2+b2 Versions of packages nslcd recommends: ii bind9-host [host] 1:9.10.3.dfsg.P4-10.1 ii ldap-utils 2.4.42+dfsg-2+b2 ii libnss-ldapd [libnss-ldap] 0.9.7-1 ii libpam-ldapd [libpam-ldap] 0.9.7-1 ii nscd 2.23-5 ii nslcd-utils 0.9.7-1 Versions of packages nslcd suggests: pn kstart <none> -- debconf information excluded
signature.asc
Description: This is a digitally signed message part