Package: libnss-ldap
Version: 261-2.1
Severity: critical
Justification: breaks the whole system


The ldap entry on nsswitch.conf for ldap authentication like:

passwd:         compat ldap
group:          compat ldap
shadow:         compat ldap

hosts:          files dns
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis

cause the whole system hang. The system loaded til gdm, but I just got an X 
mouse pointer. The system doesn't response any keyboard command, so that I 
can't kill the Xserver through ctrl+alt+backspace. I can't go to the terminal 
with ctrl+alt+f1-f6 too. Over SSH there is no connection to the system, because 
the system is hanging.

If I remove the ldap entry on nsswitch.conf, the system works normally. For 
example:

passwd:         compat
group:          compat
shadow:         compat

The chance to work with ldap authentication is just inserting ldap entry after 
the whole system loaded.


-- System Information:
Debian Release: 5.0
  APT prefers testing
  APT policy: (500, 'testing'), (10, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.28-ares-em64t (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libnss-ldap depends on:
ii  debconf [debconf-2.0] 1.5.24             Debian configuration management sy
ii  libc6                 2.7-16             GNU C Library: Shared libraries
ii  libcomerr2            1.41.3-1           common error description library
ii  libkrb53              1.6.dfsg.4~beta1-4 MIT Kerberos runtime libraries
ii  libldap-2.4-2         2.4.11-1           OpenLDAP libraries
ii  libsasl2-2            2.1.22.dfsg1-23    Cyrus SASL - authentication abstra

Versions of packages libnss-ldap recommends:
ii  libpam-ldap                   184-4.2    Pluggable Authentication Module fo
ii  nscd                          2.7-16     GNU C Library: Name Service Cache 

libnss-ldap suggests no packages.

-- debconf information:
  libnss-ldap/bindpw: (password omitted)
* libnss-ldap/rootbindpw: (password omitted)
  libnss-ldap/dblogin: false
  libnss-ldap/override: true
* shared/ldapns/base-dn: dc=skpcc,dc=org
* shared/ldapns/ldap-server: ldaps://hera.skpcc.org:636/
  libnss-ldap/confperm: false
* libnss-ldap/rootbinddn: cn=admin,dc=skpcc,dc=org
* shared/ldapns/ldap_version: 3
  libnss-ldap/binddn: cn=proxyuser,dc=example,dc=net
* libnss-ldap/nsswitch:
  libnss-ldap/dbrootlogin: true



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to