Date: Fri, 13 Feb 2009 02:25:03 -0800 From: Benjamin Lee <ben@b1c1l1.com> To: Arjun Singh <arjun810@gmail.com> Cc: freebsd-questions@freebsd.org Subject: nss_ldap problems with pthread_atfork on RELENG_7 Message-ID: <49954A7F.3030301@b1c1l1.com> In-Reply-To: <49936B34.6060308@b1c1l1.com> References: <35a7e0160902100435h273627e7g4037b8af5c7bcd80@mail.gmail.com> <20090210210034.GD10513@hal.rescomp.berkeley.edu> <35a7e0160902102208g423b8506q1038bdbbaed8a254@mail.gmail.com> <49936B34.6060308@b1c1l1.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig0C382E5E7C17C49D05CEE731
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
On 02/11/2009 04:20 PM, Benjamin Lee wrote:
> On 02/10/2009 10:08 PM, Arjun Singh wrote:
>> Thanks for the advice. I tried to see if I could get nscd to solve any=
thing,
>> but it seems to just hide the problem, and not completely. With nscd
>> enabled, the first login fails. After that, it's fine..
>>
>> I get the following in auth.log corresponding with the failed first lo=
gin
>> (with the correct pw):
>>
>> Feb 10 22:03:23 new-hkn sshd[59371]: nss_ldap: could not search LDAP s=
erver
>> - Server is unavailable
>> Feb 10 22:03:23 new-hkn sshd[59371]: fatal: login_get_lastlog: Cannot =
find
>> account for uid 10000
>> Feb 10 22:03:23 new-hkn sshd[59371]: syslogin_perform_logout: logout()=
>> returned an error
> [...]
>=20
> It appears to be a bug when using nss_ldap with RELENG_7, as I have bee=
n
> unable to reproduce the issue on machines running 6.2-RELEASE and
> 6.3-RELEASE, regardless of the version of OpenLDAP. In my environment,=
> the machines use pam_krb5 for authentication, so the problem is
> definitely not related to pam_ldap. Have you filed a problem report?
[changing the subject to be more descriptive]
I was able to work around the issue by removing pthread_atfork detection
from the configure script. Specifically:
blee@dot /usr/ports/net/nss_ldap/work/nss_ldap-264 $ diff -u
configure.in{.orig,}
--- configure.in.orig 2009-02-13 01:56:31.000000000 -0800
+++ configure.in 2009-02-13 01:56:58.000000000 -0800
@@ -230,7 +230,6 @@
AC_CHECK_FUNCS(gethostbyname)
AC_CHECK_FUNCS(nsdispatch)
AC_CHECK_LIB(pthread_nonshared, main)
-AC_CHECK_FUNCS(pthread_atfork)
AC_CHECK_FUNCS(pthread_once)
AC_CHECK_FUNCS(ether_aton)
AC_CHECK_FUNCS(ether_ntoa)
I assume, then, that the defect is related to the change from libkse to
libthr in RELENG_7. Does anybody have any further insight into this issu=
e?
--=20
Benjamin Lee
http://www.b1c1l1.com/
--------------enig0C382E5E7C17C49D05CEE731
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org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=oBD0
-----END PGP SIGNATURE-----
--------------enig0C382E5E7C17C49D05CEE731--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?49954A7F.3030301>