Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 29 Sep 2004 22:00:45 -0700
From:      Sean McNeil <sean@mcneil.com>
To:        freebsd-current@freebsd.org
Subject:   Careful with bind9 and ldap
Message-ID:  <1096520445.1386.8.camel@server>

next in thread | raw e-mail | index | archive | help

--=-2xlW5LaNJ3TL8kaLWpEa
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

My system has openldap setup with nsswitch.conf having group looking in
"files ldap".  This can cause a lockup with the named if you try to
restart it after openldap is up and running and if your hostname isn't
in /etc/hosts but served up by named.  It is along the same lines as the
long pause attempting to start openldap.

What is happening is that initgroups is being called by these programs.=20
This will cause, for my setup, all groups in files (i.e. /etc/group) and
in ldap to be read.  When starting ldap it causes it to loop back on
itself and wait for a timeout.  When restarting named it causes a lookup
of the hostname.  If the hostname isn't available in files then it
checks dns.  This causes the lockup.

The solution for me was to place my hostname in /etc/hosts.  No more
lockups.

Cheers,
Sean


--=-2xlW5LaNJ3TL8kaLWpEa
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (FreeBSD)

iD8DBQBBW5L9yQsGN30uGE4RAo63AJ4xy1TaNX7n7goyA6jIrnR7nA1XcwCfTEo/
XflFpKpwvO+EuxNN8I4R/as=
=5NFn
-----END PGP SIGNATURE-----

--=-2xlW5LaNJ3TL8kaLWpEa--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1096520445.1386.8.camel>