On Thu, Apr 28, 2011 at 04:21:58PM +0200, Mattias Geniar wrote:
> Hi Everyone,
>
>
> So that's pretty straight forward. My LDAP systems are running fine, and
> I can authenticate to them.
>
> However, the problem: when the client boots *without network
> connectivity*, the server gets stuck/hangs at "Start System Message
> Bus". I've tracked this down to the following known bug in Redhat, but
> it dates back to early 2010.
> https://bugzilla.redhat.com/show_bug.cgi?id=182464#c46
Yes, the bug is actually older than that---Don't know if it's only RH
based systems (as so many things seem to work everywhere but RH and
their offshoots) or ldap.
You should be able to fix it by changing /etc/ldap.conf. There is a
default commented line in there
#bind_policy hard
Uncomment it, change it to soft. (On the client.) Note this is
/etc/ldap.conf--in Fedora, if that's the client, I believe it's now
/etc/pam_ldap.conf or possibly /etc/nss_ldap.conf.
I can't find the earlier bug at first glance, but it's FAR older than
2010, and they never bothered to fix it.
> Has anyone else ever solved this to still be able to keep the group ldap
> entry in nsswitch.conf without having a server hang on boot if there's
> no network?
See above. Darn, I wish I could find that older bug, so that I could go
to the newer one you mention and point out that they've been unable to
fix it for far longer than a year. :) (I might do it anyway)
Grouchily yours, (Not at you, at RH for being unable to get such a
basic thing to work--actually, at one point, Fedora changed bind_policy
to soft so that it would work, but now they're back to the broken way.)
--
Scott Robbins
PGP keyID EB3467D6
( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 )
gpg --keyserver pgp.mit.edu --recv-keys EB3467D6
Principal Snyder: It's fuzzy-minded liberal thinking like that
that gets you eaten.
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
