Package: libnss-ldapd
Version: 0.4
Severity: important

I discovered this issue when testing the latest libnss-ldapd in Etch.
The output from 'getent group' do not list all groups.  I also tested
with version 0.4.1 and 0.4, and the problem is present there too.  The
svn group on my test install has many members, and it seem to be
ignored by 'id' and 'getent group':

  ghost:~# getent group svn
  
svn:*:994:aasmunds,adugna,aigarius,akai,al,albbas,alex,alexandro,alexbr,anders,andre,andread,andreas,andreasj,anoncvs,aracnus,arneha,arntog,arnulf,aruewele,asornes,axelb,barbarossa,bastian,benedikt,benjamin,berglas,bgrotan,bilbo,biret,bjarte,bjoern,bjornst,bkv,blhauge,borchr,builder,carll,cato,chris,ckuelker,climent,cobaco,conrad,cyborgar,daniel,dash,david,dloraas,dogg-e,dstevens,ebjordal,ebjotveit,eivind,elfinn,emh,ender,erik,esko,espen,espenbe,espenfjo,espeno,espenp,espental,eva,evealf,finnarne,finngl,fjemtland,fm,fredrikb,gautehk,gavin,gildseth,gingermig,gudrun,guillem,gunnhild,gustavf,halvor,halvorb,hansfn,hansolav,harald,haraldib,haraldoy,haumer,havard,havjon,hendry,herman,hilaire,hiljan,hklygre,holger,hovden,huftis,ilmari,isbjoern,jakob,jankr,jarl,jarlevik,jco,jeffbeck,jobo,joesca,joeyh,joga,johanso,johjen,johne,jomu,jonas,jordi,jorgenhg,jrognsa,jss,juechr,julien,kapital,kaplan,kar,karolpt,katla,keld,kennet,khollund,kjehol,kjetilho,klaus,kmaraas,knutnor,knutst,knuty,korsvoll,kthorger,kthorgersen,kuba,kurt,lars,larsny,larsr,lasse,ludvig,luk,lyvhel,mads,magnio,magnus,mako,marius,mariwan,markos,markus,mathiasm,matiashf,mgjansen,mihtjel,mortenhu,morteni,mortenkn,mpaulsen,msporild,n10516,nana,nilhil,nilsk,nina,nordtor,ochagenes,ocwh,odderik,oddrune,oka,olaketil,ole,olea,olekvi,olemd,olsken,omabel,orvarodd,oskadsem,oskar,ottar,ottarp,oyvind,ozmund,patrick,pere,perh,peter,pleira,pma,qber66,raghaug,ragnar,ralfg,ratix,ringe,rjernsle,rmo,robdag,roberth,rogerc,roktas,ronny,roy,rune,runen,runesk,runev,sauli,sbasma,sigbjorn,sigurdno,skogmus,snojen,solsiv,spysir,st,stian,stianj,sturles,sunny256,sveinmb,sveinove,svenare,svenn78,tadsol,talan,tarjei,tarjeiv,tc,teddy,ten,terjer,tfheen,thegve,thgjerde,thierry,thomas,thorh,tjernak,tkj,toffer,tonni,tor,tore,torgeirb,tormod,torsted,tosten,trond,trondm,truls,tsb,tufpre,vagrant,vb,vegard,vesa,vesket,vibeke,vibjohan,vidar,vidgroe,vigdis,werner,wesodd,white,winnie,xzz,yngve,zerodogg,zobel
  ghost:~# getent group|grep svn
  ghost:~# id pere
  uid=1004(pere) gid=1004(pere) groups=1004(pere),50(staff),113(ftp)
  ghost:~#

Is there some problem with large groups?

When I log in using ssh and run 'id' on the same machine, all the
group memberships are missing, not only the svn group:

  [EMAIL PROTECTED]:~$ id
  uid=1004(pere) gid=1004(pere) groups=1004(pere)
  [EMAIL PROTECTED]:~$

It seem initgroups() do not work as it should?

To make sure no caching was involved, I tried to reboot the machine
after upgrading libnss-ldapd before doing the test, and it did not
affect the results.

Happy hacking,
-- 
Petter Reinholdtsen


Reply via email to