Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 13 Jan 2006 00:33:57 -0800
From:      Sean McNeil <sean@mcneil.com>
To:        nectar@FreeBSD.org
Cc:        amd64@freebsd.org
Subject:   nss_ldap broken with sshd on amd64 -stable
Message-ID:  <1137141237.26536.11.camel@triton.mcneil.com>

next in thread | raw e-mail | index | archive | help
Just found that sshd and nss_ldap is broken with the latest version.
Reverting to NSS_LDAP_VERSION=239 restores functionality.

The problem I believe is with getpwuid(). It looks like it is returning
NULL.  I see:

login_get_lastlog: Cannot find account for uid X

from sshd.

I get the following additional errors with NSS_LDAP_VERSION=244:

sshd[]: nss_ldap: could not search LDAP server - Server is unavailable
sshd[]: fatal: login_get_lastlog: Cannot find account for uid 501
sshd[]: syslogin_perform_logout: logout() returned an error

Odd thing is, I see the following with 239:

sshd[]: nss_ldap: reconnecting to LDAP server...
sshd[]: nss_ldap: reconnected to LDAP server after 1 attempt(s)

with a successful login with sshd.

The only real difference I have in nss_ldap.conf from the standard is

bind_policy soft

Sean





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1137141237.26536.11.camel>