Debian Bug report logs - #500998
network-manager: system lockup with LDAP lookup for group

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Tobias Vogel <tobias.vogel@imis.ch>

To: submit@bugs.debian.org

Subject: machine hangs because if network-manager when authenticating via ldap

Date: Fri, 03 Oct 2008 11:10:04 +0200

Package: Network-Manager
Version: 0.6.6-2

We are using several computers in our OpenLDAP-Domain and they all have 
the same issue: the users authenticate against the LDAP-Domain.
X shows up, but the grey background and the black "X"-cursor stay, and
the machine does not respond any more, [Alt]+[Ctrl]+[F1-12] neither work
as [Alt]+[Ctrl]+[Del] does. The only thing to solve the problem is to
remove the Network-Manager -symlink from the init. Then everything 
(except the Network-Manager of course, works).

Before LDAP-Authentication was set up, everything worked fine.

We are using Debian GNU/Linux Lenny, kernel 2.6.26-1-686

Message #10 received at 500998@bugs.debian.org (full text, mbox, reply):

From: Tobias Vogel <tobias.vogel@imis.ch>

To: 500998@bugs.debian.org

Subject: Problem does not occur under debian etch

Date: Fri, 03 Oct 2008 11:53:18 +0200

The problem does not occur under debian etch.

Message #35 received at 500998-done@bugs.debian.org (full text, mbox, reply):

From: Luca Capello <luca@pca.it>

To: 500998-done@bugs.debian.org

Cc: Steve McIntyre <steve@einval.com>, Michael Biebl <biebl@debian.org>, Sascha Silbe <sascha-debian-bugs-network-manager-2@silbe.org>, boris <boris@macbeth.rhoen.de>, Toomas Tamm <tt-deb@kky.ttu.ee>, Tobias Vogel <tobias.vogel@imis.ch>, Daniel Haryo Sugondo <maschine_sug@web.de>, Neil Williams <codehelp@debian.org>, Ben Hutchings <ben@decadent.org.uk>, Richard A Nelson <cowboy@debian.org>, Martin Zobel-Helas <zobel@ftbfs.de>, Lionel « iouri » Vaux <vaux@iml.univ-mrs.fr>

Subject: Bug#500998: network-manager: system lockup with LDAP authentication

Date: Wed, 23 Feb 2011 17:05:08 +0100

[Message part 1 (text/plain, inline)]

retitle 500998 network-manager: system lockup with LDAP lookup for group
tags 500998 - unreproducible
tags 500998 + confirmed
fixed 500998 0.7.3-1~bpo50+1
thanks

Hi there!

I cc:ed all the people involved with this bug, sorry for the spam.

Summary: on a default lenny system, enabling LDAP authentication [1]
causes system lockup, GDM does not start in a promptly fashion and you
get only an X mouse pointer instead.

[1] <http://wiki.debian.org/LDAP/PAM>

This is easily reproducible on a standard Debian lenny (base system plus
tasksel's desktop, print-server and mail-server), installing libpam-ldap
and libnss-ldap and then enabling LDAP lookup for group only [2], or
applying the attached patch (500998_LDAP-lookup-group_lenny.diff).

[2] on lenny this will trigger <http://bugs.debian.org/412989>

How to reproduce this bug:
1) install a standard 5.0.8/lenny
2) install libpam-ldap and libnss-ldap
      LDAP server URI: ldap://db.debian.org
      Search base: dc=debian,dc=org
      LDAP version to use: 3
      LDAP account for root: cn=manager,dc=example,dc=net
      LDAP root account password: [simply press ENTER]
      Make local root Database admin: Yes
      Does the LDAP database require login: No
3) in /etc/nsswitch.conf enable LDAP lookup for group and in
   /etc/pam.d/common-* enable LDAP authentication or apply the attached
   patch (500998_LDAP-lookup-group_lenny.diff)
4) reboot & enjoy

The problem is network-manager: with LDAP lookup for group, the
interface is not automatically brought up at boot.  This seems to be in
contrast with Ben's post at [3], given that without the LDAP lookup
network is available even if no user is logged in.

[3] <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510678#11>

Nevertheless, the good news is that the network-manager version in
lenny-backports (i.e. 0.7.3-1~bpo50+1) solves this issue: the very same
configuration that caused the lockup on a plain lenny now works with no
problem.  I closed this bug accordingly given that I tested that on
different installations, both on a real system and on QEMU,

FWIW, this problem is no more present on a standard squeeze (again, base
system plus tasksel's desktop, print-server and mail-server).

As a final remark, while none of the people involved with this bug did,
please note that if you enable LDAP lookup for passwd, group, shadow
*and* hosts, as explained at [4], you can experience a similar bug [5],
still present in squeeze :-(

[4] <http://wiki.debian.org/LDAP/NSS>
[5] <http://bugs.debian.org/614804>

Thx, bye,
Gismo / Luca

[500998_LDAP-lookup-group_lenny.diff (text/x-diff, attachment)]

[Message part 3 (application/pgp-signature, inline)]

Send a report that this bug log contains spam.