Bug 21208
| Summary: | openldap -> openldap2.4 : система не может получить имя пользователя. | ||
|---|---|---|---|
| Product: | Sisyphus | Reporter: | ReMaks <admaks> |
| Component: | openldap2.4 | Assignee: | Vitaly Kuznetsov <vitty> |
| Status: | CLOSED WONTFIX | QA Contact: | qa-sisyphus |
| Severity: | normal | ||
| Priority: | P3 | CC: | aen, cas |
| Version: | unstable | ||
| Hardware: | all | ||
| OS: | Linux | ||
| Bug Depends on: | |||
| Bug Blocks: | 19564 | ||
ls -al /etc/nss-ldapd.conf /etc/pam_ldap.conf ну и сразу, чтобы далеко не ходить su - max strace -ff -o out.str id и прислать этот самый out.str Поставил, обновил, ошибку не ловлю. pm -qa|grep ldap pam_ldap-184-alt1 ldap-user-tools-0.5-alt1.2 alterator-ldap-groups-0.1-alt5.1 mediawiki-ldap-1.2a-alt3 alterator-ldap-users-0.5-alt3.2 openldap2.4-2.4.16-alt4.4 libkrb5-ldap-1.6.3-alt7 nss-ldapd-0.6.8-alt1 smbldap-tools-0.9.5-alt2 openldap2.4-servers-2.4.16-alt4.4 ruby-ldap-0.9.9-alt1 alterator-openldap-0.3-alt5 perl-ldap-0.39-alt1 libldap2.4-2.4.16-alt4.4 openldap2.4-clients-2.4.16-alt4.4 php5-ldap-5.2.11.20090722-alt1 libldap2.3-2.3.43-alt2.3 alterator-openldap-functions-0.1-alt1 (В ответ на комментарий №1)
> ls -al /etc/nss-ldapd.conf /etc/pam_ldap.conf
# ls -al /etc/nss-ldapd.conf /etc/pam_ldap.conf
-rw------- 1 _nslcd _nslcd 4433 Apr 2 01:45 /etc/nss-ldapd.conf
-rw-r--r-- 1 root root 8692 Apr 2 01:45 /etc/pam_ldap.conf
(В ответ на комментарий №2) > ну и сразу, чтобы далеко не ходить > su - max > strace -ff -o out.str id и прислать этот самый out.str cat out.str.26269 execve("/usr/bin/id", ["id"], [/* 33 vars */]) = 0 brk(0) = 0x804f000 uname({sys="Linux", node="srv-hn-1.home.remaks.info", ...}) = 0 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=42095, ...}) = 0 mmap2(NULL, 42095, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7ef2000 close(3) = 0 open("/lib/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\200l\1\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=1401024, ...}) = 0 mmap2(NULL, 1412104, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7d99000 fadvise64(3, 0, 1412104, POSIX_FADV_WILLNEED) = 0 mprotect(0xb7eeb000, 4096, PROT_NONE) = 0 mmap2(0xb7eec000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x152) = 0xb7eec000 mmap2(0xb7eef000, 11272, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7eef000 close(3) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f18000 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7d98000 set_thread_area({entry_number:-1 -> 6, base_addr:0xb7d986c0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0 mprotect(0xb7eec000, 8192, PROT_READ) = 0 mprotect(0x804d000, 4096, PROT_READ) = 0 mprotect(0xb7f19000, 4096, PROT_READ) = 0 munmap(0xb7ef2000, 42095) = 0 brk(0) = 0x804f000 brk(0x8070000) = 0x8070000 open("/usr/lib/locale/locale-archive", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/usr/share/locale/locale.alias", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/lib/locale/ru_RU.UTF-8/LC_IDENTIFICATION", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/lib/locale/ru_RU.utf8/LC_IDENTIFICATION", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=343, ...}) = 0 mmap2(NULL, 343, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7efc000 close(3) = 0 open("/usr/lib/gconv/gconv-modules.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=26048, ...}) = 0 mmap2(NULL, 26048, PROT_READ, MAP_SHARED, 3, 0) = 0xb7ef5000 close(3) = 0 open("/usr/lib/locale/ru_RU.UTF-8/LC_MEASUREMENT", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/lib/locale/ru_RU.utf8/LC_MEASUREMENT", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=23, ...}) = 0 mmap2(NULL, 23, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7ef4000 close(3) = 0 open("/usr/lib/locale/ru_RU.UTF-8/LC_TELEPHONE", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/lib/locale/ru_RU.utf8/LC_TELEPHONE", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=52, ...}) = 0 mmap2(NULL, 52, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7ef3000 close(3) = 0 open("/usr/lib/locale/ru_RU.UTF-8/LC_ADDRESS", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/lib/locale/ru_RU.utf8/LC_ADDRESS", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=127, ...}) = 0 mmap2(NULL, 127, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7ef2000 close(3) = 0 open("/usr/lib/locale/ru_RU.UTF-8/LC_NAME", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/lib/locale/ru_RU.utf8/LC_NAME", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=62, ...}) = 0 mmap2(NULL, 62, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7d97000 close(3) = 0 open("/usr/lib/locale/ru_RU.UTF-8/LC_PAPER", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/lib/locale/ru_RU.utf8/LC_PAPER", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=34, ...}) = 0 mmap2(NULL, 34, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7d96000 close(3) = 0 open("/usr/lib/locale/ru_RU.UTF-8/LC_MESSAGES", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/lib/locale/ru_RU.utf8/LC_MESSAGES", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 close(3) = 0 open("/usr/lib/locale/ru_RU.utf8/LC_MESSAGES/SYS_LC_MESSAGES", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=60, ...}) = 0 mmap2(NULL, 60, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7d95000 close(3) = 0 open("/usr/lib/locale/ru_RU.UTF-8/LC_MONETARY", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/lib/locale/ru_RU.utf8/LC_MONETARY", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=302, ...}) = 0 mmap2(NULL, 302, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7d94000 close(3) = 0 open("/usr/lib/locale/ru_RU.UTF-8/LC_COLLATE", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/lib/locale/ru_RU.utf8/LC_COLLATE", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=966938, ...}) = 0 mmap2(NULL, 966938, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7ca7000 close(3) = 0 open("/usr/lib/locale/ru_RU.UTF-8/LC_TIME", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/lib/locale/ru_RU.utf8/LC_TIME", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=2538, ...}) = 0 mmap2(NULL, 2538, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7ca6000 close(3) = 0 open("/usr/lib/locale/ru_RU.UTF-8/LC_NUMERIC", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/lib/locale/ru_RU.utf8/LC_NUMERIC", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=54, ...}) = 0 mmap2(NULL, 54, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7ca5000 close(3) = 0 open("/usr/lib/locale/en_US.utf8/LC_CTYPE", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=256316, ...}) = 0 mmap2(NULL, 256316, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7c66000 close(3) = 0 geteuid32() = 10000 getuid32() = 10000 getegid32() = 513 getgid32() = 513 open("/usr/share/locale/ru_RU.UTF-8/LC_MESSAGES/coreutils.mo", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/share/locale/ru_RU.utf8/LC_MESSAGES/coreutils.mo", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/share/locale/ru_RU/LC_MESSAGES/coreutils.mo", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/share/locale/ru.UTF-8/LC_MESSAGES/coreutils.mo", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/share/locale/ru.utf8/LC_MESSAGES/coreutils.mo", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/share/locale/ru/LC_MESSAGES/coreutils.mo", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=283890, ...}) = 0 mmap2(NULL, 283890, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7c20000 close(3) = 0 fstat64(1, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 1), ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7c1f000 socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3 connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) close(3) = 0 socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3 connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) close(3) = 0 open("/etc/nsswitch.conf", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=1797, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7c1e000 read(3, "#\n# Please refer to nsswitch.con"..., 4096) = 1797 read(3, "", 4096) = 0 close(3) = 0 munmap(0xb7c1e000, 4096) = 0 open("/etc/ld.so.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=42095, ...}) = 0 mmap2(NULL, 42095, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7c14000 close(3) = 0 open("/lib/libnss_files.so.2", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0\32\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=46640, ...}) = 0 mmap2(NULL, 49860, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7c07000 fadvise64(3, 0, 49860, POSIX_FADV_WILLNEED) = 0 mmap2(0xb7c12000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa) = 0xb7c12000 close(3) = 0 mprotect(0xb7c12000, 4096, PROT_READ) = 0 munmap(0xb7c14000, 42095) = 0 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3 fcntl64(3, F_GETFD) = 0x1 (flags FD_CLOEXEC) fstat64(3, {st_mode=S_IFREG|0644, st_size=3375, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7c1e000 read(3, "root:x:0:0:System Administrator:"..., 4096) = 3375 read(3, "", 4096) = 0 close(3) = 0 munmap(0xb7c1e000, 4096) = 0 open("/etc/ld.so.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=42095, ...}) = 0 mmap2(NULL, 42095, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7c14000 close(3) = 0 open("/lib/libnss_ldap.so.2", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\20\22\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=38260, ...}) = 0 mmap2(NULL, 41048, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7bfc000 fadvise64(3, 0, 41048, POSIX_FADV_WILLNEED) = 0 mmap2(0xb7c05000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8) = 0xb7c05000 close(3) = 0 mprotect(0xb7c05000, 4096, PROT_READ) = 0 munmap(0xb7c14000, 42095) = 0 socket(PF_FILE, SOCK_STREAM, 0) = 3 connect(3, {sa_family=AF_FILE, path="/var/run/nslcd/socket"}, 110) = 0 gettimeofday({1251159597, 992895}, NULL) = 0 gettimeofday({1251159597, 993053}, NULL) = 0 select(1024, NULL, [3], NULL, {9, 999842}) = 1 (out [3], left {9, 999842}) send(3, "\1\0\0\0\352\3\0\0\20'\0\0", 12, MSG_NOSIGNAL) = 12 gettimeofday({1251159597, 995065}, NULL) = 0 gettimeofday({1251159597, 995227}, NULL) = 0 select(1024, [3], NULL, NULL, {59, 999838}) = 1 (in [3], left {59, 999838}) read(3, "\1\0\0\0\352\3\0\0\3\0\0\0", 1024) = 12 gettimeofday({1251159597, 995966}, NULL) = 0 gettimeofday({1251159597, 996126}, NULL) = 0 gettimeofday({1251159597, 996282}, NULL) = 0 close(3) = 0 socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3 connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) close(3) = 0 socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3 connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) close(3) = 0 open("/etc/group", O_RDONLY|O_CLOEXEC) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=1850, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7c1e000 read(3, "root:x:0:\nbin:x:1:root\ndaemon:x:"..., 4096) = 1850 read(3, "", 4096) = 0 close(3) = 0 munmap(0xb7c1e000, 4096) = 0 socket(PF_FILE, SOCK_STREAM, 0) = 3 connect(3, {sa_family=AF_FILE, path="/var/run/nslcd/socket"}, 110) = 0 gettimeofday({1251159598, 1439}, NULL) = 0 gettimeofday({1251159598, 1604}, NULL) = 0 select(1024, NULL, [3], NULL, {9, 999835}) = 1 (out [3], left {9, 999835}) send(3, "\1\0\0\0\212\23\0\0\1\2\0\0", 12, MSG_NOSIGNAL) = 12 gettimeofday({1251159598, 3527}, NULL) = 0 gettimeofday({1251159598, 3693}, NULL) = 0 select(1024, [3], NULL, NULL, {59, 999834}) = 1 (in [3], left {59, 999834}) read(3, "\1\0\0\0\212\23\0\0\3\0\0\0", 1024) = 12 gettimeofday({1251159598, 4513}, NULL) = 0 gettimeofday({1251159598, 4674}, NULL) = 0 gettimeofday({1251159598, 4834}, NULL) = 0 close(3) = 0 getgroups32(0, NULL) = 1 getgroups32(1, [513]) = 1 open("/etc/group", O_RDONLY|O_CLOEXEC) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=1850, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7c1e000 read(3, "root:x:0:\nbin:x:1:root\ndaemon:x:"..., 4096) = 1850 read(3, "", 4096) = 0 close(3) = 0 munmap(0xb7c1e000, 4096) = 0 socket(PF_FILE, SOCK_STREAM, 0) = 3 connect(3, {sa_family=AF_FILE, path="/var/run/nslcd/socket"}, 110) = 0 gettimeofday({1251159598, 7865}, NULL) = 0 gettimeofday({1251159598, 8024}, NULL) = 0 select(1024, NULL, [3], NULL, {9, 999841}) = 1 (out [3], left {9, 999841}) send(3, "\1\0\0\0\212\23\0\0\1\2\0\0", 12, MSG_NOSIGNAL) = 12 gettimeofday({1251159598, 9947}, NULL) = 0 gettimeofday({1251159598, 10112}, NULL) = 0 select(1024, [3], NULL, NULL, {59, 999835}) = 1 (in [3], left {59, 999835}) read(3, "\1\0\0\0\212\23\0\0\3\0\0\0", 1024) = 12 gettimeofday({1251159598, 10787}, NULL) = 0 gettimeofday({1251159598, 11256}, NULL) = 0 gettimeofday({1251159598, 11416}, NULL) = 0 close(3) = 0 write(1, "uid=10000 gid=513 \320\263\321\200\321\203\320\277\320\277\321\213=5"..., 35) = 35 close(1) = 0 munmap(0xb7c1f000, 4096) = 0 close(2) = 0 exit_group(0) = ? su - max а потом strace -ff -o out.str id ? А где сообщение? /usr/bin/id: cannot find name for user ID 10000 [I have no name!@srv ~]$ (В ответ на комментарий №3) > Поставил, обновил, ошибку не ловлю. Зайди на ham1 и полюбуйся разкуроченной базой пользователей. (В ответ на комментарий №6) > su - max > а потом strace -ff -o out.str id ? > А где сообщение? > /usr/bin/id: cannot find name for user ID 10000 > [I have no name!@srv ~]$ write(1, "uid=10000 gid=513 \320\263\321\200\321\203\320\277\320\277\321\213=5"..., 35) = 35 не похоже? А теперь рассказывайте как вы обновлялись или ставились. И андрей и ReMaks Проблема в районе индексов. TestCase ldapsearch -x -b 'вашbasedn' uidNumber=10000. Решается остановкой slapd и запуском команды slapindex -v -b 'вашbasedn' Проверить права на /var/lib/ldap/bases/*/* и /var/lib/ldap/dblogs/*/* Запустить slapd, проверить багу. Trace ошибки. getpwuid(uid_t uid) возращает username, функция переопределена в nss_ldap. Поймать фильтр можно, если в /etc/nss_ldap.conf добавить debug 1. С nss-ldapd не проверял. (В ответ на комментарий №9) > А теперь рассказывайте как вы обновлялись или ставились. И андрей и ReMaks жил был школьный сервер. Настроил из инсталятора. все было хорошо перевел на сизиф. все работало (с) /в лдап-то/ потом в сизиф приехал openldap24. обновил. нигде ничего не сругалось... и вот случайно заметил что пользователя из лдап не забирают корректно... (В ответ на комментарий №10) > Проблема в районе индексов. TestCase ldapsearch -x -b 'вашbasedn' > uidNumber=10000. > Решается остановкой slapd и запуском команды > slapindex -v -b 'вашbasedn' > > Проверить права на /var/lib/ldap/bases/*/* и /var/lib/ldap/dblogs/*/* > > Запустить slapd, проверить багу. ай шайтан. сделал (slapindex -v -b 'вашbasedn') и работает... #id max uid=10000(max) gid=513(Domain Users) groups=513(Domain Users) что это было? (В ответ на комментарий №10) > Проблема в районе индексов. TestCase ldapsearch -x -b 'вашbasedn' > uidNumber=10000. тест кейс до ничего не позвращял после slapindex - все ок. Обходной способ есть, в новых версиях не воспроизводится. Прошу сделать установку гладкой. (В ответ на комментарий №15) > Обходной способ есть, в новых версиях не воспроизводится. Прошу сделать > установку гладкой. т.к. перепроверить не могу - закройте багу потом, ок? закрываю за давностью истории |
Description
ReMaks 2009-08-24 18:42:03 MSDу меня был школьный сервер, который я обновил до сизифа. (если это важно) обновление прошло, ничего не ругалось, но пользователя из базы "найти" не может. т.е. если залогиниться под пользователем - id получает, аутентификацию проходит, а имя (и группу скорее всего тоже) пользователя - нет # id max uid=10000 gid=513 groups=4294967295,513 (что за группа 4294967295??? gid=513 = это от самбы еще осталось ) # getent passwd | grep max max:x:10000:513:Maks Re:/home/maks:/bin/bash # su - max /usr/bin/id: cannot find name for user ID 10000 [I have no name!@srv ~]$ $ whoami whoami: невозможно определить имя пользователя для ID 10000 вот так "работает".... с локальными пользователями - все ОК > rpm -qa|grep ldap что говорит? # rpm -qa|grep ldap|sort alterator-ldap-groups-0.1-alt5.1 alterator-ldap-init-0.1-alt1.M50.1 alterator-ldap-users-0.5-alt3.2 alterator-openldap-0.3-alt5 alterator-openldap-functions-0.1-alt1 ldap-user-tools-0.5-alt1.2 libkrb5-ldap-1.6.3-alt7 libldap2.3-2.3.43-alt2.3 libldap2.4-2.4.16-alt4.4 mediawiki-ldap-1.2a-alt3 nss-ldapd-0.6.8-alt1 openldap2.4-2.4.16-alt4.4 openldap2.4-clients-2.4.16-alt4.4 openldap2.4-servers-2.4.16-alt4.4 pam_ldap-184-alt1 perl-ldap-0.39-alt1 php5-ldap-5.2.11.20090722-alt1 ruby-ldap-0.9.9-alt1 smbldap-tools-0.9.5-alt2 # cat /etc/pam_ldap.conf |grep ^[^#] base dc=home,dc=domain,dc=ru uri ldap://localhost timelimit 5 bind_timelimit 5 # cat /etc/nss-ldapd.conf |grep ^[^#] uri ldap://localhost base dc=home,dc=domain,dc=ru # cat /etc/sysconfig/ldap |grep ^[^#] SLAPDURLLIST="' ldap:/// ldaps:///'" SLAPD_OPTIONS="-l DAEMON -s 6" SLURPD_OPTIONS='-t /' # cat /etc/sysconfig/nslcd # uncomment this if you want debug #OPTIONS="-d" # ls -la /etc/pam.d/ total 160 drwxr-xr-x 2 root root 4096 Aug 18 12:39 . drwxr-xr-x 121 root root 8192 Aug 24 14:07 .. -rw-r----- 1 root root 113 Aug 17 15:43 alterator-chkpwd lrwxrwxrwx 1 root root 15 Mar 25 15:33 chage -> chage-chfn-chsh -rw-r----- 1 root shadow 164 Apr 23 2008 chage-chfn-chsh lrwxrwxrwx 1 root root 15 Mar 25 15:33 chfn -> chage-chfn-chsh lrwxrwxrwx 1 root root 17 Mar 25 15:33 chpasswd -> chpasswd-newusers -rw------- 1 root root 188 Apr 23 2008 chpasswd-newusers lrwxrwxrwx 1 root root 15 Mar 25 15:33 chsh -> chage-chfn-chsh -rw------- 1 root root 164 Apr 8 06:18 crond -rw-r--r-- 1 root root 58 Jun 4 13:24 cups -rw------- 1 root root 134 Jun 10 23:48 dovecot -rw-r--r-- 1 root root 195 Mar 12 2008 gadmin-dhcpd -rw-r--r-- 1 root root 195 Mar 12 2008 gadmin-samba -rw-r----- 1 root root 166 Mar 4 12:14 gparted lrwxrwxrwx 1 root root 14 Mar 25 15:33 groupadd -> user-group-mod lrwxrwxrwx 1 root root 14 Mar 25 15:33 groupdel -> user-group-mod lrwxrwxrwx 1 root root 14 Mar 25 15:33 groupmod -> user-group-mod -rw------- 1 root root 361 Apr 8 00:32 login lrwxrwxrwx 1 root root 17 Mar 25 15:33 newusers -> chpasswd-newusers -rw-r--r-- 1 root root 127 Aug 7 15:20 other -rw-r----- 1 root shadow 127 Apr 14 2007 passwd -rw-r--r-- 1 root root 147 May 27 15:38 polkit -rw-r----- 1 root root 130 May 15 18:53 ppp -rw-r--r-- 1 root root 901 Jul 24 23:04 quagga -rw-r--r-- 1 root root 127 Apr 8 03:15 samba -rw-r--r-- 1 root root 233 Aug 2 22:30 screen -rw-r----- 1 root auth 97 Aug 5 20:18 squid -rw------- 1 root root 242 Apr 12 03:42 sshd -rw------- 1 root root 590 Apr 8 00:32 su -rw------- 1 root root 127 May 6 05:49 sudo lrwxrwxrwx 1 root root 16 Aug 8 11:36 system-auth -> system-auth-ldap -rw-r--r-- 1 root root 897 Aug 7 15:20 system-auth-krb5 -rw-r--r-- 1 root root 897 Aug 7 15:20 system-auth-ldap -rw-r--r-- 1 root root 672 Aug 4 15:20 system-auth-ldap.old -rw-r--r-- 1 root root 362 Aug 7 15:20 system-auth-local -rw-r--r-- 1 root root 433 Aug 4 15:20 system-auth-local.old -rw-r--r-- 1 root root 1306 Aug 7 15:20 system-auth-multi -rw-r--r-- 1 root root 483 Aug 7 15:20 system-auth-pkcs11 lrwxrwxrwx 1 root root 31 Aug 8 11:36 system-auth-use_first_pass -> system-auth-use_first_pass-ldap -rw-r--r-- 1 root root 470 Aug 7 15:20 system-auth-use_first_pass-krb5 -rw-r--r-- 1 root root 470 Aug 7 15:20 system-auth-use_first_pass-ldap -rw-r--r-- 1 root root 183 Aug 7 15:20 system-auth-use_first_pass-local -rw-r--r-- 1 root root 687 Aug 7 15:20 system-auth-use_first_pass-multi -rw-r--r-- 1 root root 275 Aug 7 15:20 system-auth-use_first_pass-pkcs11 -rw-r--r-- 1 root root 527 Apr 8 03:15 system-auth-winbind -rw------- 1 root root 200 Apr 23 2008 user-group-mod lrwxrwxrwx 1 root root 14 Mar 25 15:33 useradd -> user-group-mod lrwxrwxrwx 1 root root 14 Mar 25 15:33 userdel -> user-group-mod lrwxrwxrwx 1 root root 14 Mar 25 15:33 usermod -> user-group-mod -rw-r----- 1 root chkpwd 39 Nov 21 2006 vlock -rw-r----- 1 root root 368 May 29 04:38 vsftpd