Latest FCs and LDAP

[Mark Haney]

Okay, so what's the deal with the latest openldap versions with FC5 or 6 
and hanging on reboots if you have ldap in nsswitch.conf?  I have over a 
dozen FC boxes that I use ldap with and I'm getting extremely frustrated 
with the last couple of openldap packages I've updated to.  Each and 
every one of them hangs on 'Starting System Message Bus....' UNLESS I 
remove ldap from nsswitch.conf.

The only known fix is to pull that from nsswitch prior to a reboot, but 
this is just silly.  I have a half dozen other distros from Debian to 
Gentoo and Suse with these versions and they don't have the problem, so 
what gives?  I can't continue to kluge my way through this every time I 
reboot these servers.  Fortunately I don't need to reboot very often, 
but unfortunately when I do need to, I forget to do this and have to 
reboot multiple times.

Any hints on a fix?  Or a timeline to a fix?

[Rahul Sundaram]

Mark Haney wrote:
> Okay, so what's the deal with the latest openldap versions with FC5 or 6 
> and hanging on reboots if you have ldap in nsswitch.conf?  I have over a 
> dozen FC boxes that I use ldap with and I'm getting extremely frustrated 
> with the last couple of openldap packages I've updated to.  Each and 
> every one of them hangs on 'Starting System Message Bus....' UNLESS I 
> remove ldap from nsswitch.conf.
>
> The only known fix is to pull that from nsswitch prior to a reboot, but 
> this is just silly.  I have a half dozen other distros from Debian to 
> Gentoo and Suse with these versions and they don't have the problem, so 
> what gives?  I can't continue to kluge my way through this every time I 
> reboot these servers.  Fortunately I don't need to reboot very often, 
> but unfortunately when I do need to, I forget to do this and have to 
> reboot multiple times.
>
> Any hints on a fix?  Or a timeline to a fix?

Have you filed any bug reports? If not search bugzilla and report this 
problem with the version details and logs. A bugzilla report is the 
first minimum effort you would need to take to reach the package 
maintainer.

Rahul

[Brian Gaynor]

> -----Original Message-----
> From: [e-mail] 
> [mailto:[e-mail]] On Behalf Of Mark Haney
> Sent: Tuesday, January 02, 2007 1:13 PM
> To: For users of Fedora
> Subject: Latest FCs and LDAP
>
> Okay, so what's the deal with the latest openldap versions 
> with FC5 or 6 
> and hanging on reboots if you have ldap in nsswitch.conf?  I 
> have over a 
> dozen FC boxes that I use ldap with and I'm getting extremely 
> frustrated 
> with the last couple of openldap packages I've updated to.  Each and 
> every one of them hangs on 'Starting System Message Bus....' UNLESS I 
> remove ldap from nsswitch.conf.
>
> The only known fix is to pull that from nsswitch prior to a 
> reboot, but 
> this is just silly.  I have a half dozen other distros from Debian to 
> Gentoo and Suse with these versions and they don't have the 
> problem, so 
> what gives?  I can't continue to kluge my way through this 
> every time I 
> reboot these servers.  Fortunately I don't need to reboot very often, 
> but unfortunately when I do need to, I forget to do this and have to 
> reboot multiple times.
>
> Any hints on a fix?  Or a timeline to a fix?

Mark -

As I recall the easy fix was to reorder a service it depends on to start
earlier in the boot sequence. Sorry I can't remember what right now - I'll
check my notes at work and post tomorrow if no one else has. There were bugs
raised for this...

Brian

[Gordon Messmer]

Mark Haney wrote:
> Okay, so what's the deal with the latest openldap versions with FC5 or 6 
> and hanging on reboots if you have ldap in nsswitch.conf?

Maybe dbus is looking up "nogroup", like udev did:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=181432

It should only be a problem if dbus starts before the network, which it 
doesn't on my system.  What do you get if you try:

$ ls /etc/rc.d/rc5.d | egrep 'messagebus|network'
S10network@
S22messagebus@

[Brian Gaynor]

On Tue, 2007-01-02 at 16:12 -0500, Mark Haney wrote:
> Okay, so what's the deal with the latest openldap versions with FC5 or 6 
> and hanging on reboots if you have ldap in nsswitch.conf?  I have over a 
> dozen FC boxes that I use ldap with and I'm getting extremely frustrated 
> with the last couple of openldap packages I've updated to.  Each and 
> every one of them hangs on 'Starting System Message Bus....' UNLESS I 
> remove ldap from nsswitch.conf.
>
> The only known fix is to pull that from nsswitch prior to a reboot, but 
> this is just silly.  I have a half dozen other distros from Debian to 
> Gentoo and Suse with these versions and they don't have the problem, so 
> what gives?  I can't continue to kluge my way through this every time I 
> reboot these servers.  Fortunately I don't need to reboot very often, 
> but unfortunately when I do need to, I forget to do this and have to 
> reboot multiple times.
>
> Any hints on a fix?  Or a timeline to a fix?

Mark -

I ended up having to change the startup priority of LDAP from 27 to 12
so it starts before named. Then I added:

nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon

to /etc/ldap.conf so slapd will start and stop cleanly. Relevant
bugzillas are #186448 and 186527 (both are still listed as NEW, sigh).

Brian