CentOS Bug Tracker
CentOS Website

Viewing Issue Simple Details Jump to Notes ] View Advanced ] Issue History ] Print ]
ID Category Severity Reproducibility Date Submitted Last Update
0002964 [CentOS-5] glibc major always 2008-07-08 20:50 2009-03-19 16:31
Reporter ma3d View Status public  
Assigned To
Priority normal Resolution open  
Status confirmed   Product Version 5.2
Summary 0002964: problems when using ldap via nsswitch after upgrading to centos 5.1
Description I just upgraded a couple of my CentOS 5 boxes(yum update), and discovered that after the upgrade the machines are "broken". When logging in, I now see shell errors parsing several of the files in /etc/profile.d:

zsh users see:
/etc/profile.d/krb5-workstation.sh:5: parse error: condition expected: =
/etc/profile.d/vim.sh:[:3: unrecognized condition: `100'
compaudit:107: unknown group

and bash users see:
-bash: [: =: unary operator expected
-bash: [: -le: unary operator expected


users with zsh as their login shell are unable to run any executables. shell builtins(echo etc.) seem to work fine, but if I run an external program I just get my prompt back without any effect. bash users seem to still be able to run commands, but su seems to not be working. If I log in as root, and attempt to su to any ldap user I simply get my root prompt back after the pam stack has executed(I know pam modules were called because pam_mkhomedir is in my session stack, and su'ing to a user without a home results in a message indicating that his home dir has been created.)

All the non system accounts on these machines are only found in ldap. getent passwd, and getent group both return what I would expect to see(local file contents + ldap users/groups), and as I said I can log in as a user in ldap, but with the problems described above.

If I add the ldap data to the local files(such that all users, and groups reside in /etc/{passwd,group}) the problems go away.
Additional Information
Tags No tags attached.
Attached Files

- Relationships

-  Notes
(0007595)
ma3d (reporter)
2008-07-08 20:52

oops, I mis-typed the summary. that should read centos 5.2 not 5.1
(0007596)
ma3d (reporter)
2008-07-08 21:05

Just more info. this happens whether or not selinux is enabled.
(0007600)
tru (administrator)
2008-07-09 06:58

see the releases notes, it's a bug upstream.

https://bugzilla.redhat.com/show_bug.cgi?id=448014 [^]

We have this bug listed in our release notes:

http://wiki.centos.org/Manuals/ReleaseNotes/CentOS5.2#head-447967c60eb305ef2c5dbbc3f4e8b3c4c5170632 [^]

You can try the nss_ldap from our testing repo for this bug:

http://dev.centos.org/centos/5/ [^]
(0007601)
tru (administrator)
2008-07-09 06:59

waiting for upstream fix. Meanwhile request users to test dev.centos.org version.
(0007603)
ma3d (reporter)
2008-07-09 15:23

I tried nss_ldap-253-12.el5.centos.i386.rpm from dev.centos.org, and this appears to resolve the problem.

thanks for the great work maintaining and supporting centos,
-Matt
(0008609)
Jeff_S (reporter)
2009-01-21 15:41

According to the upstream bug, this is now fixed in 5.3

Ref:
https://bugzilla.redhat.com/show_bug.cgi?id=448014#c88 [^]
http://rhn.redhat.com/errata/RHBA-2009-0241.html [^]
(0008925)
Jeff_S (reporter)
2009-03-19 16:31

Verified this is fixed in 5.3, please close this bug

- Issue History
Date Modified Username Field Change
2008-07-08 20:50 ma3d New Issue
2008-07-08 20:50 ma3d Assigned To => kbsingh@karan.org
2008-07-08 20:52 ma3d Note Added: 0007595
2008-07-08 21:05 ma3d Note Added: 0007596
2008-07-09 06:58 tru Note Added: 0007600
2008-07-09 06:59 tru Note Added: 0007601
2008-07-09 06:59 tru Status new => confirmed
2008-07-09 15:23 ma3d Note Added: 0007603
2009-01-21 15:41 Jeff_S Note Added: 0008609
2009-01-21 15:41 Jeff_S Issue Monitored: Jeff_S
2009-03-19 16:31 Jeff_S Note Added: 0008925


Copyright © 2000 - 2009 Mantis Group
Powered by Mantis Bugtracker