From owner-freebsd-questions@FreeBSD.ORG Fri Feb 13 10:25:15 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 0807F1065674 for ; Fri, 13 Feb 2009 10:25:15 +0000 (UTC) (envelope-from ben@b1c1l1.com) Received: from lancer.b1c1l1.com (lancer.b1c1l1.com [72.13.86.100]) by mx1.freebsd.org (Postfix) with ESMTP id CCC028FC1F for ; Fri, 13 Feb 2009 10:25:14 +0000 (UTC) (envelope-from ben@b1c1l1.com) Received: from supra.b1c1l1.com (c-76-102-159-187.hsd1.ca.comcast.net [76.102.159.187]) by lancer.b1c1l1.com (Postfix) with ESMTPSA id 9674E5C21; Fri, 13 Feb 2009 02:25:12 -0800 (PST) Message-ID: <49954A7F.3030301@b1c1l1.com> Date: Fri, 13 Feb 2009 02:25:03 -0800 From: Benjamin Lee User-Agent: Thunderbird 2.0.0.19 (X11/20090125) MIME-Version: 1.0 To: Arjun Singh References: <35a7e0160902100435h273627e7g4037b8af5c7bcd80@mail.gmail.com> <20090210210034.GD10513@hal.rescomp.berkeley.edu> <35a7e0160902102208g423b8506q1038bdbbaed8a254@mail.gmail.com> <49936B34.6060308@b1c1l1.com> In-Reply-To: <49936B34.6060308@b1c1l1.com> X-Enigmail-Version: 0.95.7 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig0C382E5E7C17C49D05CEE731" Cc: freebsd-questions@freebsd.org Subject: nss_ldap problems with pthread_atfork on RELENG_7 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Feb 2009 10:25:15 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig0C382E5E7C17C49D05CEE731 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 02/11/2009 04:20 PM, Benjamin Lee wrote: > On 02/10/2009 10:08 PM, Arjun Singh wrote: >> Thanks for the advice. I tried to see if I could get nscd to solve any= thing, >> but it seems to just hide the problem, and not completely. With nscd >> enabled, the first login fails. After that, it's fine.. >> >> I get the following in auth.log corresponding with the failed first lo= gin >> (with the correct pw): >> >> Feb 10 22:03:23 new-hkn sshd[59371]: nss_ldap: could not search LDAP s= erver >> - Server is unavailable >> Feb 10 22:03:23 new-hkn sshd[59371]: fatal: login_get_lastlog: Cannot = find >> account for uid 10000 >> Feb 10 22:03:23 new-hkn sshd[59371]: syslogin_perform_logout: logout()= >> returned an error > [...] >=20 > It appears to be a bug when using nss_ldap with RELENG_7, as I have bee= n > unable to reproduce the issue on machines running 6.2-RELEASE and > 6.3-RELEASE, regardless of the version of OpenLDAP. In my environment,= > the machines use pam_krb5 for authentication, so the problem is > definitely not related to pam_ldap. Have you filed a problem report? [changing the subject to be more descriptive] I was able to work around the issue by removing pthread_atfork detection from the configure script. Specifically: blee@dot /usr/ports/net/nss_ldap/work/nss_ldap-264 $ diff -u configure.in{.orig,} --- configure.in.orig 2009-02-13 01:56:31.000000000 -0800 +++ configure.in 2009-02-13 01:56:58.000000000 -0800 @@ -230,7 +230,6 @@ AC_CHECK_FUNCS(gethostbyname) AC_CHECK_FUNCS(nsdispatch) AC_CHECK_LIB(pthread_nonshared, main) -AC_CHECK_FUNCS(pthread_atfork) AC_CHECK_FUNCS(pthread_once) AC_CHECK_FUNCS(ether_aton) AC_CHECK_FUNCS(ether_ntoa) I assume, then, that the defect is related to the change from libkse to libthr in RELENG_7. Does anybody have any further insight into this issu= e? --=20 Benjamin Lee http://www.b1c1l1.com/ --------------enig0C382E5E7C17C49D05CEE731 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQIcBAEBAgAGBQJJlUqGAAoJEN/n9makEYThAgAP/05ipLQLsxTUzc90kg9rKHbF 7pDIwM7usWKOXD0hU8Xtaigno4//roiBUmAUWPzcxxVaAxsSYFkTeHUel4DlAVW3 H9eH2yndf5Pc5iYNDJUtKvfjUCbDlqEvBUJminf0sdz+mD1k/C7RnbNJfGBlskjr 7lSoadzvaR2jTN8h5q0ZXzJxtdKwFSFvHeBTau9s0Kv7qzS5drZ1XtRcrFOMLi3T TpsujyVdgn4gHjXBSxOha2czlS+K3XqiiVzsp76G4oc5geMJKZLBkLaRMNhIFCMt V9QWQbC4+k/nnKBHaPlo5OjQ6asWVdkWLEYlrAEeo9IK6F3gGQeWHLdAkqV50M95 lekvgt3GgkgxhAGY3U6I1cYwnj6CrukwMzgeJxFb2higOLP6f/Wk4WSNOOMWcceX lUzmGR7EW4vF9VZtlih2MNrtriu3AOvDaFMswjhETeSLLiVPKidJeTpsXZvdFuEc oAUQ4GRd/4MwJFIHivhsHYtQ5kwRCp23XlaAXw6iKXVe4w0PlvJSZ/QM74EAAszl 6tfyIuUCuwcgXEuF2J71VjKaSl2AxZEQVevFn3OX2Ta+CIfeIyKBBsp4NrVsYTf0 kPfeZACYRFKYyp1biA3RojehctxSUI/VWUdxAetNfUJxz9SjNiWLK11nvqlUI1g4 iGgifaJXiWEgP3l+foD7 =oBD0 -----END PGP SIGNATURE----- --------------enig0C382E5E7C17C49D05CEE731--