ALT Linux Bugzilla – #21208

ls -al /etc/nss-ldapd.conf /etc/pam_ldap.conf

ну и сразу, чтобы далеко не ходить
su - max
strace -ff -o out.str id и прислать этот самый out.str

Поставил, обновил, ошибку не ловлю.
pm -qa|grep ldap
pam_ldap-184-alt1
ldap-user-tools-0.5-alt1.2
alterator-ldap-groups-0.1-alt5.1
mediawiki-ldap-1.2a-alt3
alterator-ldap-users-0.5-alt3.2
openldap2.4-2.4.16-alt4.4
libkrb5-ldap-1.6.3-alt7
nss-ldapd-0.6.8-alt1
smbldap-tools-0.9.5-alt2
openldap2.4-servers-2.4.16-alt4.4
ruby-ldap-0.9.9-alt1
alterator-openldap-0.3-alt5
perl-ldap-0.39-alt1
libldap2.4-2.4.16-alt4.4
openldap2.4-clients-2.4.16-alt4.4
php5-ldap-5.2.11.20090722-alt1
libldap2.3-2.3.43-alt2.3
alterator-openldap-functions-0.1-alt1

(В ответ на комментарий №1)
> ls -al /etc/nss-ldapd.conf /etc/pam_ldap.conf

# ls -al /etc/nss-ldapd.conf /etc/pam_ldap.conf
-rw------- 1 _nslcd _nslcd 4433 Apr  2 01:45 /etc/nss-ldapd.conf
-rw-r--r-- 1 root   root   8692 Apr  2 01:45 /etc/pam_ldap.conf

(В ответ на комментарий №2)
> ну и сразу, чтобы далеко не ходить
> su - max
> strace -ff -o out.str id и прислать этот самый out.str

 cat out.str.26269
execve("/usr/bin/id", ["id"], [/* 33 vars */]) = 0
brk(0)                                  = 0x804f000
uname({sys="Linux", node="srv-hn-1.home.remaks.info", ...}) = 0
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=42095, ...}) = 0
mmap2(NULL, 42095, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7ef2000
close(3)                                = 0
open("/lib/libc.so.6", O_RDONLY)        = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\200l\1\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1401024, ...}) = 0
mmap2(NULL, 1412104, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7d99000
fadvise64(3, 0, 1412104, POSIX_FADV_WILLNEED) = 0
mprotect(0xb7eeb000, 4096, PROT_NONE)   = 0
mmap2(0xb7eec000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x152) = 0xb7eec000
mmap2(0xb7eef000, 11272, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7eef000
close(3)                                = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f18000
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7d98000
set_thread_area({entry_number:-1 -> 6, base_addr:0xb7d986c0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0
mprotect(0xb7eec000, 8192, PROT_READ)   = 0
mprotect(0x804d000, 4096, PROT_READ)    = 0
mprotect(0xb7f19000, 4096, PROT_READ)   = 0
munmap(0xb7ef2000, 42095)               = 0
brk(0)                                  = 0x804f000
brk(0x8070000)                          = 0x8070000
open("/usr/lib/locale/locale-archive", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory)
open("/usr/share/locale/locale.alias", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/locale/ru_RU.UTF-8/LC_IDENTIFICATION", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/locale/ru_RU.utf8/LC_IDENTIFICATION", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=343, ...}) = 0
mmap2(NULL, 343, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7efc000
close(3)                                = 0
open("/usr/lib/gconv/gconv-modules.cache", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=26048, ...}) = 0
mmap2(NULL, 26048, PROT_READ, MAP_SHARED, 3, 0) = 0xb7ef5000
close(3)                                = 0
open("/usr/lib/locale/ru_RU.UTF-8/LC_MEASUREMENT", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/locale/ru_RU.utf8/LC_MEASUREMENT", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=23, ...}) = 0
mmap2(NULL, 23, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7ef4000
close(3)                                = 0
open("/usr/lib/locale/ru_RU.UTF-8/LC_TELEPHONE", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/locale/ru_RU.utf8/LC_TELEPHONE", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=52, ...}) = 0
mmap2(NULL, 52, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7ef3000
close(3)                                = 0
open("/usr/lib/locale/ru_RU.UTF-8/LC_ADDRESS", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/locale/ru_RU.utf8/LC_ADDRESS", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=127, ...}) = 0
mmap2(NULL, 127, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7ef2000
close(3)                                = 0
open("/usr/lib/locale/ru_RU.UTF-8/LC_NAME", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/locale/ru_RU.utf8/LC_NAME", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=62, ...}) = 0
mmap2(NULL, 62, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7d97000
close(3)                                = 0
open("/usr/lib/locale/ru_RU.UTF-8/LC_PAPER", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/locale/ru_RU.utf8/LC_PAPER", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=34, ...}) = 0
mmap2(NULL, 34, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7d96000
close(3)                                = 0
open("/usr/lib/locale/ru_RU.UTF-8/LC_MESSAGES", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/locale/ru_RU.utf8/LC_MESSAGES", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
close(3)                                = 0
open("/usr/lib/locale/ru_RU.utf8/LC_MESSAGES/SYS_LC_MESSAGES", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=60, ...}) = 0
mmap2(NULL, 60, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7d95000
close(3)                                = 0
open("/usr/lib/locale/ru_RU.UTF-8/LC_MONETARY", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/locale/ru_RU.utf8/LC_MONETARY", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=302, ...}) = 0
mmap2(NULL, 302, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7d94000
close(3)                                = 0
open("/usr/lib/locale/ru_RU.UTF-8/LC_COLLATE", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/locale/ru_RU.utf8/LC_COLLATE", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=966938, ...}) = 0
mmap2(NULL, 966938, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7ca7000
close(3)                                = 0
open("/usr/lib/locale/ru_RU.UTF-8/LC_TIME", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/locale/ru_RU.utf8/LC_TIME", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=2538, ...}) = 0
mmap2(NULL, 2538, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7ca6000
close(3)                                = 0
open("/usr/lib/locale/ru_RU.UTF-8/LC_NUMERIC", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/locale/ru_RU.utf8/LC_NUMERIC", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=54, ...}) = 0
mmap2(NULL, 54, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7ca5000
close(3)                                = 0
open("/usr/lib/locale/en_US.utf8/LC_CTYPE", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=256316, ...}) = 0
mmap2(NULL, 256316, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7c66000
close(3)                                = 0
geteuid32()                             = 10000
getuid32()                              = 10000
getegid32()                             = 513
getgid32()                              = 513
open("/usr/share/locale/ru_RU.UTF-8/LC_MESSAGES/coreutils.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/share/locale/ru_RU.utf8/LC_MESSAGES/coreutils.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/share/locale/ru_RU/LC_MESSAGES/coreutils.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/share/locale/ru.UTF-8/LC_MESSAGES/coreutils.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/share/locale/ru.utf8/LC_MESSAGES/coreutils.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/share/locale/ru/LC_MESSAGES/coreutils.mo", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=283890, ...}) = 0
mmap2(NULL, 283890, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7c20000
close(3)                                = 0
fstat64(1, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 1), ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7c1f000
socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
close(3)                                = 0
socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
close(3)                                = 0
open("/etc/nsswitch.conf", O_RDONLY)    = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=1797, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7c1e000
read(3, "#\n# Please refer to nsswitch.con"..., 4096) = 1797
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb7c1e000, 4096)                = 0
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=42095, ...}) = 0
mmap2(NULL, 42095, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7c14000
close(3)                                = 0
open("/lib/libnss_files.so.2", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0\32\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=46640, ...}) = 0
mmap2(NULL, 49860, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7c07000
fadvise64(3, 0, 49860, POSIX_FADV_WILLNEED) = 0
mmap2(0xb7c12000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa) = 0xb7c12000
close(3)                                = 0
mprotect(0xb7c12000, 4096, PROT_READ)   = 0
munmap(0xb7c14000, 42095)               = 0
open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
fcntl64(3, F_GETFD)                     = 0x1 (flags FD_CLOEXEC)
fstat64(3, {st_mode=S_IFREG|0644, st_size=3375, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7c1e000
read(3, "root:x:0:0:System Administrator:"..., 4096) = 3375
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb7c1e000, 4096)                = 0
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=42095, ...}) = 0
mmap2(NULL, 42095, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7c14000
close(3)                                = 0
open("/lib/libnss_ldap.so.2", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\20\22\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0644, st_size=38260, ...}) = 0
mmap2(NULL, 41048, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7bfc000
fadvise64(3, 0, 41048, POSIX_FADV_WILLNEED) = 0
mmap2(0xb7c05000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8) = 0xb7c05000
close(3)                                = 0
mprotect(0xb7c05000, 4096, PROT_READ)   = 0
munmap(0xb7c14000, 42095)               = 0
socket(PF_FILE, SOCK_STREAM, 0)         = 3
connect(3, {sa_family=AF_FILE, path="/var/run/nslcd/socket"}, 110) = 0
gettimeofday({1251159597, 992895}, NULL) = 0
gettimeofday({1251159597, 993053}, NULL) = 0
select(1024, NULL, [3], NULL, {9, 999842}) = 1 (out [3], left {9, 999842})
send(3, "\1\0\0\0\352\3\0\0\20'\0\0", 12, MSG_NOSIGNAL) = 12
gettimeofday({1251159597, 995065}, NULL) = 0
gettimeofday({1251159597, 995227}, NULL) = 0
select(1024, [3], NULL, NULL, {59, 999838}) = 1 (in [3], left {59, 999838})
read(3, "\1\0\0\0\352\3\0\0\3\0\0\0", 1024) = 12
gettimeofday({1251159597, 995966}, NULL) = 0
gettimeofday({1251159597, 996126}, NULL) = 0
gettimeofday({1251159597, 996282}, NULL) = 0
close(3)                                = 0
socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
close(3)                                = 0
socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
close(3)                                = 0
open("/etc/group", O_RDONLY|O_CLOEXEC)  = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=1850, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7c1e000
read(3, "root:x:0:\nbin:x:1:root\ndaemon:x:"..., 4096) = 1850
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb7c1e000, 4096)                = 0
socket(PF_FILE, SOCK_STREAM, 0)         = 3
connect(3, {sa_family=AF_FILE, path="/var/run/nslcd/socket"}, 110) = 0
gettimeofday({1251159598, 1439}, NULL)  = 0
gettimeofday({1251159598, 1604}, NULL)  = 0
select(1024, NULL, [3], NULL, {9, 999835}) = 1 (out [3], left {9, 999835})
send(3, "\1\0\0\0\212\23\0\0\1\2\0\0", 12, MSG_NOSIGNAL) = 12
gettimeofday({1251159598, 3527}, NULL)  = 0
gettimeofday({1251159598, 3693}, NULL)  = 0
select(1024, [3], NULL, NULL, {59, 999834}) = 1 (in [3], left {59, 999834})
read(3, "\1\0\0\0\212\23\0\0\3\0\0\0", 1024) = 12
gettimeofday({1251159598, 4513}, NULL)  = 0
gettimeofday({1251159598, 4674}, NULL)  = 0
gettimeofday({1251159598, 4834}, NULL)  = 0
close(3)                                = 0
getgroups32(0, NULL)                    = 1
getgroups32(1, [513])                   = 1
open("/etc/group", O_RDONLY|O_CLOEXEC)  = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=1850, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7c1e000
read(3, "root:x:0:\nbin:x:1:root\ndaemon:x:"..., 4096) = 1850
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb7c1e000, 4096)                = 0
socket(PF_FILE, SOCK_STREAM, 0)         = 3
connect(3, {sa_family=AF_FILE, path="/var/run/nslcd/socket"}, 110) = 0
gettimeofday({1251159598, 7865}, NULL)  = 0
gettimeofday({1251159598, 8024}, NULL)  = 0
select(1024, NULL, [3], NULL, {9, 999841}) = 1 (out [3], left {9, 999841})
send(3, "\1\0\0\0\212\23\0\0\1\2\0\0", 12, MSG_NOSIGNAL) = 12
gettimeofday({1251159598, 9947}, NULL)  = 0
gettimeofday({1251159598, 10112}, NULL) = 0
select(1024, [3], NULL, NULL, {59, 999835}) = 1 (in [3], left {59, 999835})
read(3, "\1\0\0\0\212\23\0\0\3\0\0\0", 1024) = 12
gettimeofday({1251159598, 10787}, NULL) = 0
gettimeofday({1251159598, 11256}, NULL) = 0
gettimeofday({1251159598, 11416}, NULL) = 0
close(3)                                = 0
write(1, "uid=10000 gid=513 \320\263\321\200\321\203\320\277\320\277\321\213=5"..., 35) = 35
close(1)                                = 0
munmap(0xb7c1f000, 4096)                = 0
close(2)                                = 0
exit_group(0)                           = ?

su - max
а потом strace -ff -o out.str id ?
А где сообщение?
/usr/bin/id: cannot find name for user ID 10000
[I have no name!@srv ~]$

(В ответ на комментарий №3)
> Поставил, обновил, ошибку не ловлю.
Зайди на ham1 и полюбуйся разкуроченной базой пользователей.

(В ответ на комментарий №6)
> su - max
> а потом strace -ff -o out.str id ?
> А где сообщение?
> /usr/bin/id: cannot find name for user ID 10000
> [I have no name!@srv ~]$

write(1, "uid=10000 gid=513
\320\263\321\200\321\203\320\277\320\277\321\213=5"..., 35) = 35


не похоже?

А теперь рассказывайте как вы обновлялись или ставились. И андрей и ReMaks

Проблема в районе индексов. TestCase ldapsearch -x -b 'вашbasedn' uidNumber=10000.
Решается остановкой slapd и запуском команды
slapindex -v -b 'вашbasedn'

Проверить права на /var/lib/ldap/bases/*/* и /var/lib/ldap/dblogs/*/*

Запустить slapd, проверить багу.

Trace ошибки.
getpwuid(uid_t uid) возращает username, функция переопределена в nss_ldap. Поймать фильтр можно, если в /etc/nss_ldap.conf добавить debug 1. С nss-ldapd не проверял.

(В ответ на комментарий №9)
> А теперь рассказывайте как вы обновлялись или ставились. И андрей и ReMaks

жил был школьный сервер. Настроил из инсталятора. все было хорошо
перевел на сизиф.
все работало (с) /в лдап-то/

потом в сизиф приехал openldap24.
обновил. нигде ничего не сругалось...

и вот случайно заметил что пользователя из лдап не забирают корректно...

(В ответ на комментарий №10)
> Проблема в районе индексов. TestCase ldapsearch -x -b 'вашbasedn'
> uidNumber=10000.
> Решается остановкой slapd и запуском команды
> slapindex -v -b 'вашbasedn'
> 
> Проверить права на /var/lib/ldap/bases/*/* и /var/lib/ldap/dblogs/*/*
> 
> Запустить slapd, проверить багу.



ай шайтан.

сделал (slapindex -v -b 'вашbasedn')
и работает...

#id max
uid=10000(max) gid=513(Domain Users) groups=513(Domain Users)


что это было?

(В ответ на комментарий №10)
> Проблема в районе индексов. TestCase ldapsearch -x -b 'вашbasedn'
> uidNumber=10000.

тест кейс
до ничего не позвращял

после slapindex - все ок.

Обходной способ есть, в новых версиях не воспроизводится. Прошу сделать установку гладкой.

(В ответ на комментарий №15)
> Обходной способ есть, в новых версиях не воспроизводится. Прошу сделать
> установку гладкой.

т.к. перепроверить не могу - закройте багу потом, ок?

закрываю за давностью истории