From owner-freebsd-ports-bugs@FreeBSD.ORG Thu Mar 19 14:40:10 2009 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 16FD610656CB for ; Thu, 19 Mar 2009 14:40:04 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id DB38C8FC2A for ; Thu, 19 Mar 2009 14:40:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n2JEe3oa042848 for ; Thu, 19 Mar 2009 14:40:03 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n2JEe32s042847; Thu, 19 Mar 2009 14:40:03 GMT (envelope-from gnats) Resent-Date: Thu, 19 Mar 2009 14:40:03 GMT Resent-Message-Id: <200903191440.n2JEe32s042847@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Sergey Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 779F71065670 for ; Thu, 19 Mar 2009 14:32:54 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21]) by mx1.freebsd.org (Postfix) with ESMTP id 4AEC88FC1B for ; Thu, 19 Mar 2009 14:32:54 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.14.3/8.14.3) with ESMTP id n2JEWrS2033876 for ; Thu, 19 Mar 2009 14:32:53 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.14.3/8.14.3/Submit) id n2JEWrh5033875; Thu, 19 Mar 2009 14:32:53 GMT (envelope-from nobody) Message-Id: <200903191432.n2JEWrh5033875@www.freebsd.org> Date: Thu, 19 Mar 2009 14:32:53 GMT From: Sergey To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: ports/132816: Fail to read name of new user from ldap X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Mar 2009 14:40:14 -0000 >Number: 132816 >Category: ports >Synopsis: Fail to read name of new user from ldap >Confidential: no >Severity: non-critical >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Mar 19 14:40:03 UTC 2009 >Closed-Date: >Last-Modified: >Originator: Sergey >Release: FreeBSD 6.3-RELEASE #0 >Organization: >Environment: FreeBSD host.mydomain.ru 6.3-RELEASE FreeBSD 6.3-RELEASE #0: Mon Dec 22 11:03:36 MSK 2008 root@host.mydomain.ru:/usr/obj/usr/src/sys/HOST_IPFW_KERNEL i386 >Description: This server uses authentification in OpenLDAP (currently running on FreeBSD 7.1-RELEASE #0, openldap-server-2.4.13 Open source LDAP server implementation). Used software: nss_ldap-1.257 RFC 2307 NSS module openldap-client-2.3.43 Open source LDAP client implementation pam_ldap-1.8.4 A pam module for authenticating with LDAP php5-ldap-5.2.6_2 The ldap shared extension for php My etc/pam.d/sshd is: # # PAM configuration for the "sshd" service # # auth auth sufficient pam_opie.so no_warn no_fake_prompts auth requisite pam_opieaccess.so no_warn allow_local auth sufficient /usr/local/lib/pam_ldap.so no_warn try_first_pass auth required pam_unix.so no_warn try_first_pass # account account required pam_nologin.so account sufficient /usr/local/lib/pam_ldap.so account required /usr/local/lib/pam_ldap.so account required pam_login_access.so account required pam_unix.so # session session optional /usr/local/lib/pam_ldap.so session required pam_permit.so # password password sufficient /usr/local/lib/pam_ldap.so use_authtok password required pam_unix.so no_warn try_first_pass Everything works fine. The problem appeared when I've added a user. It was successfully added. And login (ssh user@this-host) is also successful. But executing `whoami` shows UID (i.e. 1029) instead of username. I think, reboot should fix this problem, but it isn't right way. It looks like a bug in about pam_ldap or nss_ldap. Or I'm to restart some service (what?)? >How-To-Repeat: >Fix: >Release-Note: >Audit-Trail: >Unformatted: