Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 30 Dec 2011 11:53:37 GMT
From:      Yuri Khotyaintsev <yuri@irfu.se>
To:        freebsd-gnats-submit@FreeBSD.org
Subject:   ports/163714: nss_ldap 1.265_7 does not return the full list of groups
Message-ID:  <201112301153.pBUBrb2S008244@red.freebsd.org>
Resent-Message-ID: <201112301200.pBUC0TVw041952@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         163714
>Category:       ports
>Synopsis:       nss_ldap 1.265_7 does not return the full list of groups
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Dec 30 12:00:29 UTC 2011
>Closed-Date:
>Last-Modified:
>Originator:     Yuri Khotyaintsev
>Release:        8.2-STABLE
>Organization:
Swedish Institute of Space Physics
>Environment:
FreeBSD xxx.irfu.se 8.2-STABLE FreeBSD 8.2-STABLE #2: Thu Apr 28 11:39:50 CEST 2011     root@xxx.irfu.se:/usr/obj/usr/src/sys/DB  amd64
>Description:
Unfortunately upgrading nss_ldap from 1.265_6 to 1.265_7 breaks my  nss_ldap setup which was working without changes for many years. The  problem is that only the primary group being returned with 1.265_7.

 Example:

 nss_ldap 1.265_6:

 [root@hem /usr/local/etc]# groups ko
 phisp cluster

(works correctly)

 nss_ldap 1.265_7:

 [root@hem /usr/local/etc]# groups ko
 phisp

(only the primary group is returned!!!)

 Debug output is included below.

nss_ldap 1.265_7:
[root@hem /usr/local/etc]# groups ko
nss_ldap: ==> _nss_ldap_enter
nss_ldap: <== _nss_ldap_enter
nss_ldap: ==> _nss_ldap_getbyname
nss_ldap: ==> _nss_ldap_search_s
nss_ldap: ==> do_init
nss_ldap: ==> do_close
nss_ldap: <== do_close
nss_ldap: ==> do_close_no_unbind
nss_ldap: <== do_close_no_unbind (connection was not open)
nss_ldap: ==> _nss_ldap_add_uri
nss_ldap: <== _nss_ldap_add_uri: added URI ldapi:///var/run/openldap/ldapi
nss_ldap: ==> _nss_ldap_add_uri
nss_ldap: <== _nss_ldap_add_uri: added URI ldaps://amanda.irfu.se
nss_ldap: <== do_init (initialized session)
nss_ldap: ==> do_filter
nss_ldap: :== do_filter: (&(objectClass=posixAccount)(uid=ko))
nss_ldap: <== do_filter
nss_ldap: ==> do_with_reconnect
nss_ldap: ==> do_open
nss_ldap: ==> do_init
nss_ldap: <== do_init (initialized session)
nss_ldap: ==> do_bind
nss_ldap: <== do_bind
nss_ldap: ==> do_set_sockopts
nss_ldap: <== do_set_sockopts
nss_ldap: <== do_open (session connected to DSA)
nss_ldap: ==> do_search_s
nss_ldap: <== do_search_s
nss_ldap: <== do_with_reconnect
nss_ldap: <== _nss_ldap_search_s
nss_ldap: ==> do_parse_s
nss_ldap: ==> _nss_ldap_assign_userpassword
nss_ldap: <== _nss_ldap_assign_userpassword
nss_ldap: <== do_parse_s
nss_ldap: ==> _nss_ldap_leave
nss_ldap: <== _nss_ldap_leave
nss_ldap: <== _nss_ldap_getbyname
nss_ldap: ==> _nss_ldap_initgroups_dyn (user=ko)
nss_ldap: ==> _nss_ldap_enter
nss_ldap: <== _nss_ldap_enter
nss_ldap: ==> do_init
nss_ldap: :== do_init (stolen socket detected)
nss_ldap: <== do_init (initialized session)
nss_ldap: ==> _nss_ldap_search_s
nss_ldap: ==> do_init
nss_ldap: <== do_init (initialized session)
nss_ldap: ==> do_filter
nss_ldap: :== do_filter: (&(objectClass=posixAccount)(uid=ko))
nss_ldap: <== do_filter
nss_ldap: ==> do_with_reconnect
nss_ldap: ==> do_open
nss_ldap: ==> do_init
nss_ldap: <== do_init (initialized session)
nss_ldap: ==> do_bind
nss_ldap: <== do_bind
nss_ldap: ==> do_set_sockopts
nss_ldap: <== do_set_sockopts
nss_ldap: <== do_open (session connected to DSA)
nss_ldap: ==> do_search_s
nss_ldap: <== do_search_s
nss_ldap: <== do_with_reconnect
nss_ldap: <== _nss_ldap_search_s
nss_ldap: ==> _nss_ldap_ent_context_init_locked
nss_ldap: <== _nss_ldap_ent_context_init_locked
nss_ldap: ==> _nss_ldap_getent_ex
nss_ldap: ==> _nss_ldap_ent_context_init_locked
nss_ldap: <== _nss_ldap_ent_context_init_locked
nss_ldap: ==> _nss_ldap_search
nss_ldap: ==> do_init
nss_ldap: :== do_init (stolen socket detected)
nss_ldap: <== do_init (initialized session)
nss_ldap: ==> do_filter
nss_ldap: :== do_filter: (&(objectClass=posixGroup)(|(memberUid=ko)(uniqueMember=uid=ko,ou=People,dc=irfu,dc=se)))
nss_ldap: <== do_filter
nss_ldap: ==> do_with_reconnect
nss_ldap: ==> do_open
nss_ldap: ==> do_init
nss_ldap: <== do_init (initialized session)
nss_ldap: ==> do_bind
nss_ldap: <== do_bind
nss_ldap: ==> do_set_sockopts
nss_ldap: <== do_set_sockopts
nss_ldap: <== do_open (session connected to DSA)
nss_ldap: ==> do_search
nss_ldap: <== do_search
nss_ldap: <== do_with_reconnect
nss_ldap: <== _nss_ldap_search
nss_ldap: ==> do_parse
nss_ldap: ==> do_result
nss_ldap: <== do_result
nss_ldap: ==> _nss_ldap_namelist_find
nss_ldap: <== _nss_ldap_namelist_find
nss_ldap: ==> _nss_ldap_ent_context_init_locked
nss_ldap: <== _nss_ldap_ent_context_init_locked
nss_ldap: ==> _nss_ldap_getent_ex
nss_ldap: ==> _nss_ldap_ent_context_init_locked
nss_ldap: <== _nss_ldap_ent_context_init_locked
nss_ldap: ==> _nss_ldap_search
nss_ldap: ==> do_init
nss_ldap: :== do_init (stolen socket detected)
nss_ldap: <== do_init (initialized session)
nss_ldap: ==> do_filter
nss_ldap: :== do_filter: (&(objectClass=posixGroup)(uniqueMember=cn=cluster,ou=Group,dc=irfu,dc=se))
nss_ldap: <== do_filter
nss_ldap: ==> do_with_reconnect
nss_ldap: ==> do_open
nss_ldap: ==> do_init
nss_ldap: <== do_init (initialized session)
nss_ldap: ==> do_bind
nss_ldap: <== do_bind
nss_ldap: ==> do_set_sockopts
nss_ldap: <== do_set_sockopts
nss_ldap: <== do_open (session connected to DSA)
nss_ldap: ==> do_search
nss_ldap: <== do_search
nss_ldap: <== do_with_reconnect
nss_ldap: <== _nss_ldap_search
nss_ldap: ==> do_parse
nss_ldap: ==> do_result
nss_ldap: <== do_result
nss_ldap: <== do_parse
nss_ldap: ==> _nss_ldap_search
nss_ldap: ==> do_init
nss_ldap: :== do_init (stolen socket detected)
nss_ldap: <== do_init (initialized session)
nss_ldap: <== _nss_ldap_getent_ex
nss_ldap: ==> _nss_ldap_ent_context_release
nss_ldap: <== _nss_ldap_ent_context_release
nss_ldap: ==> do_result
nss_ldap: <== do_result
nss_ldap: <== do_parse
nss_ldap: <== _nss_ldap_getent_ex
nss_ldap: ==> _nss_ldap_namelist_destroy
nss_ldap: <== _nss_ldap_namelist_destroy
nss_ldap: ==> _nss_ldap_ent_context_release
nss_ldap: ==> do_result
nss_ldap: <== do_result
nss_ldap: <== _nss_ldap_ent_context_release
nss_ldap: ==> _nss_ldap_leave
nss_ldap: <== _nss_ldap_leave
nss_ldap: <== _nss_ldap_initgroups_dyn (not found)
nss_ldap: ==> _nss_ldap_enter
nss_ldap: <== _nss_ldap_enter
nss_ldap: ==> _nss_ldap_getbyname
nss_ldap: ==> _nss_ldap_search_s
nss_ldap: ==> do_init
nss_ldap: <== do_init (initialized session)
nss_ldap: ==> do_filter
nss_ldap: :== do_filter: (&(objectClass=posixGroup)(gidNumber=206))
nss_ldap: <== do_filter
nss_ldap: ==> do_with_reconnect
nss_ldap: ==> do_open
nss_ldap: ==> do_init
nss_ldap: <== do_init (initialized session)
nss_ldap: ==> do_bind
nss_ldap: <== do_bind
nss_ldap: ==> do_set_sockopts
nss_ldap: <== do_set_sockopts
nss_ldap: <== do_open (session connected to DSA)
nss_ldap: ==> do_search_s
nss_ldap: <== do_search_s
nss_ldap: <== do_with_reconnect
nss_ldap: <== _nss_ldap_search_s
nss_ldap: ==> do_parse_s
nss_ldap: ==> _nss_ldap_assign_userpassword
nss_ldap: <== _nss_ldap_assign_userpassword
nss_ldap: ==> _nss_ldap_namelist_find
nss_ldap: <== _nss_ldap_namelist_find
nss_ldap: ==> _nss_ldap_namelist_push (cn=phisp,ou=Group,dc=irfu,dc=se)
nss_ldap: <== _nss_ldap_namelist_push
nss_ldap: ==> _nss_ldap_namelist_destroy
nss_ldap: <== _nss_ldap_namelist_destroy
nss_ldap: <== do_parse_s
nss_ldap: ==> _nss_ldap_leave
nss_ldap: <== _nss_ldap_leave
nss_ldap: <== _nss_ldap_getbyname
phisp

nss_ldap 1.265_6:
[root@hem /usr/local/etc]# groups ko
nss_ldap: ==> _nss_ldap_enter
nss_ldap: <== _nss_ldap_enter
nss_ldap: ==> _nss_ldap_getbyname
nss_ldap: ==> _nss_ldap_search_s
nss_ldap: ==> do_init
nss_ldap: ==> do_close
nss_ldap: <== do_close
nss_ldap: ==> do_close_no_unbind
nss_ldap: <== do_close_no_unbind (connection was not open)
nss_ldap: ==> _nss_ldap_add_uri
nss_ldap: <== _nss_ldap_add_uri: added URI ldapi:///var/run/openldap/ldapi
nss_ldap: ==> _nss_ldap_add_uri
nss_ldap: <== _nss_ldap_add_uri: added URI ldaps://amanda.irfu.se
nss_ldap: <== do_init (initialized session)
nss_ldap: ==> do_filter
nss_ldap: :== do_filter: (&(objectClass=posixAccount)(uid=ko))
nss_ldap: <== do_filter
nss_ldap: ==> do_with_reconnect
nss_ldap: ==> do_open
nss_ldap: ==> do_init
nss_ldap: <== do_init (initialized session)
nss_ldap: ==> do_bind
nss_ldap: <== do_bind
nss_ldap: ==> do_set_sockopts
nss_ldap: <== do_set_sockopts
nss_ldap: <== do_open (session connected to DSA)
nss_ldap: ==> do_search_s
nss_ldap: <== do_search_s
nss_ldap: <== do_with_reconnect
nss_ldap: <== _nss_ldap_search_s
nss_ldap: ==> do_parse_s
nss_ldap: ==> _nss_ldap_assign_userpassword
nss_ldap: <== _nss_ldap_assign_userpassword
nss_ldap: <== do_parse_s
nss_ldap: ==> _nss_ldap_leave
nss_ldap: <== _nss_ldap_leave
nss_ldap: <== _nss_ldap_getbyname
nss_ldap: ==> _nss_ldap_enter
nss_ldap: <== _nss_ldap_enter
nss_ldap: ==> _nss_ldap_ent_context_init_locked
nss_ldap: <== _nss_ldap_ent_context_init_locked
nss_ldap: ==> _nss_ldap_leave
nss_ldap: <== _nss_ldap_leave
nss_ldap: ==> _nss_ldap_enter
nss_ldap: <== _nss_ldap_enter
nss_ldap: ==> _nss_ldap_getent_ex
nss_ldap: ==> _nss_ldap_ent_context_init_locked
nss_ldap: <== _nss_ldap_ent_context_init_locked
nss_ldap: ==> _nss_ldap_search
nss_ldap: ==> do_init
nss_ldap: :== do_init (stolen socket detected)
nss_ldap: <== do_init (initialized session)
nss_ldap: ==> do_filter
nss_ldap: :== do_filter: (&(objectClass=posixGroup))
nss_ldap: <== do_filter
nss_ldap: ==> do_with_reconnect
nss_ldap: ==> do_open
nss_ldap: ==> do_init
nss_ldap: <== do_init (initialized session)
nss_ldap: ==> do_bind
nss_ldap: <== do_bind
nss_ldap: ==> do_set_sockopts
nss_ldap: <== do_set_sockopts
nss_ldap: <== do_open (session connected to DSA)
nss_ldap: ==> do_search
nss_ldap: <== do_search
nss_ldap: <== do_with_reconnect
nss_ldap: <== _nss_ldap_search
nss_ldap: ==> do_parse
nss_ldap: ==> do_result
nss_ldap: <== do_result
nss_ldap: ==> _nss_ldap_assign_userpassword
nss_ldap: <== _nss_ldap_assign_userpassword
nss_ldap: ==> _nss_ldap_namelist_find
nss_ldap: <== _nss_ldap_namelist_find
nss_ldap: ==> _nss_ldap_namelist_push (cn=cassini,ou=Group,dc=irfu,dc=se)
nss_ldap: <== _nss_ldap_namelist_push
nss_ldap: ==> _nss_ldap_namelist_destroy
nss_ldap: <== _nss_ldap_namelist_destroy
nss_ldap: <== do_parse
nss_ldap: <== _nss_ldap_getent_ex
nss_ldap: ==> _nss_ldap_leave
nss_ldap: <== _nss_ldap_leave
nss_ldap: ==> _nss_ldap_enter
nss_ldap: <== _nss_ldap_enter
nss_ldap: ==> _nss_ldap_getent_ex
nss_ldap: ==> do_parse
nss_ldap: ==> do_result
nss_ldap: <== do_result
nss_ldap: ==> _nss_ldap_assign_userpassword
nss_ldap: <== _nss_ldap_assign_userpassword
nss_ldap: ==> _nss_ldap_namelist_find
nss_ldap: <== _nss_ldap_namelist_find
nss_ldap: ==> _nss_ldap_namelist_push (cn=sat,ou=Group,dc=irfu,dc=se)
nss_ldap: <== _nss_ldap_namelist_push
nss_ldap: ==> _nss_ldap_namelist_destroy
nss_ldap: <== _nss_ldap_namelist_destroy
nss_ldap: <== do_parse
nss_ldap: <== _nss_ldap_getent_ex
nss_ldap: ==> _nss_ldap_leave
nss_ldap: <== _nss_ldap_leave
nss_ldap: ==> _nss_ldap_enter
nss_ldap: <== _nss_ldap_enter
nss_ldap: ==> _nss_ldap_getent_ex
nss_ldap: ==> do_parse
nss_ldap: ==> do_result
nss_ldap: <== do_result
nss_ldap: ==> _nss_ldap_assign_userpassword
nss_ldap: <== _nss_ldap_assign_userpassword
nss_ldap: ==> _nss_ldap_namelist_find
nss_ldap: <== _nss_ldap_namelist_find
nss_ldap: ==> _nss_ldap_namelist_push (cn=phisp,ou=Group,dc=irfu,dc=se)
nss_ldap: <== _nss_ldap_namelist_push
nss_ldap: ==> _nss_ldap_namelist_destroy
nss_ldap: <== _nss_ldap_namelist_destroy
nss_ldap: <== do_parse
nss_ldap: <== _nss_ldap_getent_ex
nss_ldap: ==> _nss_ldap_leave
nss_ldap: <== _nss_ldap_leave
nss_ldap: ==> _nss_ldap_enter
nss_ldap: <== _nss_ldap_enter
nss_ldap: ==> _nss_ldap_getent_ex
nss_ldap: ==> do_parse
nss_ldap: ==> do_result
nss_ldap: <== do_result
nss_ldap: ==> _nss_ldap_assign_userpassword
nss_ldap: <== _nss_ldap_assign_userpassword
nss_ldap: ==> _nss_ldap_namelist_find
nss_ldap: <== _nss_ldap_namelist_find
nss_ldap: ==> _nss_ldap_namelist_push (cn=admin,ou=Group,dc=irfu,dc=se)
nss_ldap: <== _nss_ldap_namelist_push
nss_ldap: ==> _nss_ldap_namelist_destroy
nss_ldap: <== _nss_ldap_namelist_destroy
nss_ldap: <== do_parse
nss_ldap: <== _nss_ldap_getent_ex
nss_ldap: ==> _nss_ldap_leave
nss_ldap: <== _nss_ldap_leave
nss_ldap: ==> _nss_ldap_enter
nss_ldap: <== _nss_ldap_enter
nss_ldap: ==> _nss_ldap_getent_ex
nss_ldap: ==> do_parse
nss_ldap: ==> do_result
nss_ldap: <== do_result
nss_ldap: ==> _nss_ldap_assign_userpassword
nss_ldap: <== _nss_ldap_assign_userpassword
nss_ldap: ==> _nss_ldap_namelist_find
nss_ldap: <== _nss_ldap_namelist_find
nss_ldap: ==> _nss_ldap_namelist_push (cn=irfu,ou=Group,dc=irfu,dc=se)
nss_ldap: <== _nss_ldap_namelist_push
nss_ldap: ==> _nss_ldap_namelist_destroy
nss_ldap: <== _nss_ldap_namelist_destroy
nss_ldap: <== do_parse
nss_ldap: <== _nss_ldap_getent_ex
nss_ldap: ==> _nss_ldap_leave
nss_ldap: <== _nss_ldap_leave
nss_ldap: ==> _nss_ldap_enter
nss_ldap: <== _nss_ldap_enter
nss_ldap: ==> _nss_ldap_getent_ex
nss_ldap: ==> do_parse
nss_ldap: ==> do_result
nss_ldap: <== do_result
nss_ldap: ==> _nss_ldap_assign_userpassword
nss_ldap: <== _nss_ldap_assign_userpassword
nss_ldap: ==> _nss_ldap_namelist_find
nss_ldap: <== _nss_ldap_namelist_find
nss_ldap: ==> _nss_ldap_namelist_push (cn=oldies,ou=Group,dc=irfu,dc=se)
nss_ldap: <== _nss_ldap_namelist_push
nss_ldap: ==> _nss_ldap_namelist_destroy
nss_ldap: <== _nss_ldap_namelist_destroy
nss_ldap: <== do_parse
nss_ldap: <== _nss_ldap_getent_ex
nss_ldap: ==> _nss_ldap_leave
nss_ldap: <== _nss_ldap_leave
nss_ldap: ==> _nss_ldap_enter
nss_ldap: <== _nss_ldap_enter
nss_ldap: ==> _nss_ldap_getent_ex
nss_ldap: ==> do_parse
nss_ldap: ==> do_result
nss_ldap: <== do_result
nss_ldap: ==> _nss_ldap_assign_userpassword
nss_ldap: <== _nss_ldap_assign_userpassword
nss_ldap: ==> _nss_ldap_namelist_find
nss_ldap: <== _nss_ldap_namelist_find
nss_ldap: ==> _nss_ldap_namelist_push (cn=extern,ou=Group,dc=irfu,dc=se)
nss_ldap: <== _nss_ldap_namelist_push
nss_ldap: ==> _nss_ldap_namelist_destroy
nss_ldap: <== _nss_ldap_namelist_destroy
nss_ldap: <== do_parse
nss_ldap: <== _nss_ldap_getent_ex
nss_ldap: ==> _nss_ldap_leave
nss_ldap: <== _nss_ldap_leave
nss_ldap: ==> _nss_ldap_enter
nss_ldap: <== _nss_ldap_enter
nss_ldap: ==> _nss_ldap_getent_ex
nss_ldap: ==> do_parse
nss_ldap: ==> do_result
nss_ldap: <== do_result
nss_ldap: ==> _nss_ldap_assign_userpassword
nss_ldap: <== _nss_ldap_assign_userpassword
nss_ldap: ==> _nss_ldap_namelist_find
nss_ldap: <== _nss_ldap_namelist_find
nss_ldap: ==> _nss_ldap_namelist_push (cn=cluster,ou=Group,dc=irfu,dc=se)
nss_ldap: <== _nss_ldap_namelist_push
nss_ldap: ==> _nss_ldap_namelist_destroy
nss_ldap: <== _nss_ldap_namelist_destroy
nss_ldap: <== do_parse
nss_ldap: <== _nss_ldap_getent_ex
nss_ldap: ==> _nss_ldap_leave
nss_ldap: <== _nss_ldap_leave
nss_ldap: ==> _nss_ldap_enter
nss_ldap: <== _nss_ldap_enter
nss_ldap: ==> _nss_ldap_getent_ex
nss_ldap: ==> do_parse
nss_ldap: ==> do_result
nss_ldap: <== do_result
nss_ldap: ==> _nss_ldap_assign_userpassword
nss_ldap: <== _nss_ldap_assign_userpassword
nss_ldap: ==> _nss_ldap_namelist_find
nss_ldap: <== _nss_ldap_namelist_find
nss_ldap: ==> _nss_ldap_namelist_push (cn=rosetta,ou=Group,dc=irfu,dc=se)
nss_ldap: <== _nss_ldap_namelist_push
nss_ldap: ==> _nss_ldap_namelist_destroy
nss_ldap: <== _nss_ldap_namelist_destroy
nss_ldap: <== do_parse
nss_ldap: <== _nss_ldap_getent_ex
nss_ldap: ==> _nss_ldap_leave
nss_ldap: <== _nss_ldap_leave
nss_ldap: ==> _nss_ldap_enter
nss_ldap: <== _nss_ldap_enter
nss_ldap: ==> _nss_ldap_getent_ex
nss_ldap: ==> do_parse
nss_ldap: ==> do_result
nss_ldap: <== do_result
nss_ldap: ==> _nss_ldap_assign_userpassword
nss_ldap: <== _nss_ldap_assign_userpassword
nss_ldap: ==> _nss_ldap_namelist_find
nss_ldap: <== _nss_ldap_namelist_find
nss_ldap: ==> _nss_ldap_namelist_push (cn=astrid2,ou=Group,dc=irfu,dc=se)
nss_ldap: <== _nss_ldap_namelist_push
nss_ldap: ==> _nss_ldap_namelist_destroy
nss_ldap: <== _nss_ldap_namelist_destroy
nss_ldap: <== do_parse
nss_ldap: <== _nss_ldap_getent_ex
nss_ldap: ==> _nss_ldap_leave
nss_ldap: <== _nss_ldap_leave
nss_ldap: ==> _nss_ldap_enter
nss_ldap: <== _nss_ldap_enter
nss_ldap: ==> _nss_ldap_getent_ex
nss_ldap: ==> do_parse
nss_ldap: ==> do_result
nss_ldap: <== do_result
nss_ldap: <== do_parse
nss_ldap: ==> _nss_ldap_search
nss_ldap: ==> do_init
nss_ldap: :== do_init (stolen socket detected)
nss_ldap: <== do_init (initialized session)
nss_ldap: <== _nss_ldap_getent_ex
nss_ldap: ==> _nss_ldap_leave
nss_ldap: <== _nss_ldap_leave
nss_ldap: ==> _nss_ldap_enter
nss_ldap: <== _nss_ldap_enter
nss_ldap: ==> _nss_ldap_ent_context_release
nss_ldap: <== _nss_ldap_ent_context_release
nss_ldap: ==> _nss_ldap_leave
nss_ldap: <== _nss_ldap_leave
nss_ldap: ==> _nss_ldap_enter
nss_ldap: <== _nss_ldap_enter
nss_ldap: ==> _nss_ldap_getbyname
nss_ldap: ==> _nss_ldap_search_s
nss_ldap: ==> do_init
nss_ldap: <== do_init (initialized session)
nss_ldap: ==> do_filter
nss_ldap: :== do_filter: (&(objectClass=posixGroup)(gidNumber=206))
nss_ldap: <== do_filter
nss_ldap: ==> do_with_reconnect
nss_ldap: ==> do_open
nss_ldap: ==> do_init
nss_ldap: <== do_init (initialized session)
nss_ldap: ==> do_bind
nss_ldap: <== do_bind
nss_ldap: ==> do_set_sockopts
nss_ldap: <== do_set_sockopts
nss_ldap: <== do_open (session connected to DSA)
nss_ldap: ==> do_search_s
nss_ldap: <== do_search_s
nss_ldap: <== do_with_reconnect
nss_ldap: <== _nss_ldap_search_s
nss_ldap: ==> do_parse_s
nss_ldap: ==> _nss_ldap_assign_userpassword
nss_ldap: <== _nss_ldap_assign_userpassword
nss_ldap: ==> _nss_ldap_namelist_find
nss_ldap: <== _nss_ldap_namelist_find
nss_ldap: ==> _nss_ldap_namelist_push (cn=phisp,ou=Group,dc=irfu,dc=se)
nss_ldap: <== _nss_ldap_namelist_push
nss_ldap: ==> _nss_ldap_namelist_destroy
nss_ldap: <== _nss_ldap_namelist_destroy
nss_ldap: <== do_parse_s
nss_ldap: ==> _nss_ldap_leave
nss_ldap: <== _nss_ldap_leave
nss_ldap: <== _nss_ldap_getbyname
nss_ldap: ==> _nss_ldap_enter
nss_ldap: <== _nss_ldap_enter
nss_ldap: ==> _nss_ldap_getbyname
nss_ldap: ==> _nss_ldap_search_s
nss_ldap: ==> do_init
nss_ldap: :== do_init (stolen socket detected)
nss_ldap: <== do_init (initialized session)
nss_ldap: ==> do_filter
nss_ldap: :== do_filter: (&(objectClass=posixGroup)(gidNumber=158))
nss_ldap: <== do_filter
nss_ldap: ==> do_with_reconnect
nss_ldap: ==> do_open
nss_ldap: ==> do_init
nss_ldap: <== do_init (initialized session)
nss_ldap: ==> do_bind
nss_ldap: <== do_bind
nss_ldap: ==> do_set_sockopts
nss_ldap: <== do_set_sockopts
nss_ldap: <== do_open (session connected to DSA)
nss_ldap: ==> do_search_s
nss_ldap: <== do_search_s
nss_ldap: <== do_with_reconnect
nss_ldap: <== _nss_ldap_search_s
nss_ldap: ==> do_parse_s
nss_ldap: ==> _nss_ldap_assign_userpassword
nss_ldap: <== _nss_ldap_assign_userpassword
nss_ldap: ==> _nss_ldap_namelist_find
nss_ldap: <== _nss_ldap_namelist_find
nss_ldap: ==> _nss_ldap_namelist_push (cn=cluster,ou=Group,dc=irfu,dc=se)
nss_ldap: <== _nss_ldap_namelist_push
nss_ldap: ==> _nss_ldap_namelist_destroy
nss_ldap: <== _nss_ldap_namelist_destroy
nss_ldap: <== do_parse_s
nss_ldap: ==> _nss_ldap_leave
nss_ldap: <== _nss_ldap_leave
nss_ldap: <== _nss_ldap_getbyname
phisp cluster


>How-To-Repeat:
Use nss_ldap 1.265_7 and run groups on a user which is a member of more than one group (LDAP).
>Fix:
Revert the change introduced in 1.265_7.

>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201112301153.pBUBrb2S008244>