Package: nslcd
Version: 0.9.7-1
Severity: normal

Dear Maintainer,

  Tonight I was setting up a new build server, and I happened to install
nslcd before the ca-certificates package had been installed on this new
machine. During installation nslcd failed to start, and I saw this error
in the log:

> root@aule:/# systemctl status nslcd -l
> ● nslcd.service - LSB: LDAP connection daemon
>    Loaded: loaded (/etc/init.d/nslcd; generated; vendor preset: enabled)
>    Active: failed (Result: exit-code) since Mon 2016-09-05 04:29:20 UTC; 2min 
> 10s ago
>      Docs: man:systemd-sysv-generator(8)
> 
> Sep 05 04:29:20 aule.calenhad.com systemd[1]: Starting LSB: LDAP connection 
> daemon...
> Sep 05 04:29:20 aule.calenhad.com nslcd[1443]: Starting LDAP connection 
> daemon: nslcdnslcd: /etc/nslcd.conf:28: tls_cacertfile: error accessing 
> /etc/ssl/certs/ca-certificates.crt: No such file or directory
> Sep 05 04:29:20 aule.calenhad.com nslcd[1443]:  failed!
> Sep 05 04:29:20 aule.calenhad.com systemd[1]: nslcd.service: Control process 
> exited, code=exited status=1
> Sep 05 04:29:20 aule.calenhad.com systemd[1]: Failed to start LSB: LDAP 
> connection daemon.
> Sep 05 04:29:20 aule.calenhad.com systemd[1]: nslcd.service: Unit entered 
> failed state.
> Sep 05 04:29:20 aule.calenhad.com systemd[1]: nslcd.service: Failed with 
> result 'exit-code'.

  Installing the ca-certificates package created the ca-certificates.crt
file which is expected by the default configuration of nslcd. I also
tested installing nslcd on another identically configured test server,
but purposefully installed the ca-certificates package before installing
nslcd. That install finished without issue.

  I think nslcd should recommend the ca-certificates package.

Thanks,
Mathias

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.7.2-grsec-201608211829 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages nslcd depends on:
ii  adduser                3.115
ii  debconf [debconf-2.0]  1.5.59
ii  libc6                  2.23-5
ii  libgssapi-krb5-2       1.14.3+dfsg-1
ii  libldap-2.4-2          2.4.42+dfsg-2+b2

Versions of packages nslcd recommends:
ii  bind9-host [host]           1:9.10.3.dfsg.P4-10.1
ii  ldap-utils                  2.4.42+dfsg-2+b2
ii  libnss-ldapd [libnss-ldap]  0.9.7-1
ii  libpam-ldapd [libpam-ldap]  0.9.7-1
ii  nscd                        2.23-5
ii  nslcd-utils                 0.9.7-1

Versions of packages nslcd suggests:
pn  kstart  <none>

-- debconf information excluded

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to