Package: libnss-ldap
Version: 251-7.4
Severity: normal

Hello,

in special situations, libnss-ldap can break the installation of other
packages.

I am installing Debian Etch systems with FAI (Fully Automatic Install).
At the beginning of the installation, nsswitch.conf is set to use ldap
for groups and users. Then libnss-ldap and other packages (like
openssh-client) are installed, which try to add local groups or users
(for example ssh group in openssh-client post-install).

If libnss-ldap and openssh-client are both installed in one run, and
openssh-client is configured before libnss-ldap, the addgroup in
openssh-client post-install stops with the following error:

ldap-nss.c:1368 do_init: Assertion `cfg->ldc_uris[__session.ls_current_uri] != 
((void *)0)' failed.
/var/lib/dpkg/info/openssh-client.postinst: line 86:  4093 Aborted addgroup 
--system --quiet ssh 
dpkg: error processing openssh-client (--configure): 
subprocess post-installation script returned error exit status 134

The solution for my special problem is, not to set nsswitch.conf to use
ldap before the proper installation of libnss-ldap. However the package
in Sarge does not have this bug with the failing assertion. Furthermore
it should be checked, if this bug can be hit while doing a
dist-upgrade.

Holger Mense

-- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.19.4-fai
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages libnss-ldap depends on:
ii  debconf [debconf-2.0]       1.5.11       Debian configuration management sy
ii  libc6                       2.3.6.ds1-13 GNU C Library: Shared libraries
ii  libkrb53                    1.4.4-7      MIT Kerberos runtime libraries
ii  libldap2                    2.1.30-13.3  OpenLDAP libraries

Versions of packages libnss-ldap recommends:
pn  libpam-ldap                   <none>     (no description available)
pn  nscd                          <none>     (no description available)

-- debconf information excluded


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to