We came in to the same problem this morning. What we ended up doing was
restoring from a backed up ldif file. Once we had it partially working,
another fix came out and broke it again.
Nathaniel Hall
Intrusion Detection and Firewall Technician
Ozarks Technical Community College -- Office of Computer Networking
halln@xxxxxxx
417-799-0552
Ryan Golhar wrote:
This morning, I came in to work and was told no one could log on to any
of the linux machines. After some digging, I checked the LDAP directory
and found out it was totally empty -- it was overwritten.
I was able to recreate it based on /etc/passwd and /etc/shadow, but then
proceeded to find out why. I found out that last night, new ldap rpms
were installed by up2date:
[Thu Sep 2 00:32:14 2004] up2date installing packages:
['nss_ldap-207-11', 'openldap-2.0.27-15', 'openldap-clients-2.0.27-15',
'openldap-servers-2.0.27-15']
[Thu Sep 2 00:32:27 2004] up2date Removing packages from package
profile: ['nss_ldap-207-10', 'openldap-2.0.27-11',
'openldap-clients-2.0.27-11', 'openldap-servers-2.0.27-11']
[Thu Sep 2 00:32:28 2004] up2date Adding packages to package profile:
['nss_ldap-207-11', 'openldap-2.0.27-15', 'openldap-clients-2.0.27-15',
'openldap-servers-2.0.27-15']
[Thu Sep 2 00:32:29 2004] up2date deleting
/var/spool/up2date/nss_ldap-207-11.i386.rpm
[Thu Sep 2 00:32:29 2004] up2date deleting
/var/spool/up2date/nss_ldap-207-11.i386.hdr
[Thu Sep 2 00:32:29 2004] up2date deleting
/var/spool/up2date/openldap-2.0.27-15.i386.rpm
[Thu Sep 2 00:32:29 2004] up2date deleting
/var/spool/up2date/openldap-2.0.27-15.i386.hdr
[Thu Sep 2 00:32:29 2004] up2date deleting
/var/spool/up2date/openldap-clients-2.0.27-15.i386.hdr
[Thu Sep 2 00:32:29 2004] up2date deleting
/var/spool/up2date/openldap-clients-2.0.27-15.i386.rpm
[Thu Sep 2 00:32:29 2004] up2date deleting
/var/spool/up2date/openldap-servers-2.0.27-15.i386.hdr
[Thu Sep 2 00:32:29 2004] up2date deleting
/var/spool/up2date/openldap-servers-2.0.27-15.i386.rpm
I've now marked ldap to be skipped in updates, but am curious if this is
normal behaviour.
Thank god I keep everything in /etc/passwd and /etc/shadow just in case.
-----
Ryan Golhar
Computational Biologist
The Informatics Institute at
The University of Medicine & Dentistry of NJ
Phone: 973-972-5034
Fax: 973-972-7412
Email: golharam@xxxxxxxxx
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
