Re: can't log in on workstation

[Petter Reinholdtsen <pere@hungry.com>]

[Petter Reinholdtsen]
> Perhaps we should try to fetch the certificate using a ifup/dhcp hook
> instead of a init.d script?

A simple way to do this is to put a script like this in
/etc/dhcp/dhclient-exit-hooks.d/fetch-ldap-cert:

#!/bin/sh
# Make sure LDAP certificate is downloaded when the network become
# available, if the init.d script failed to fetch it at boot.

if [ -r /etc/debian-edu/config ] ; then
    . /etc/debian-edu/config
fi

if [ false = "$DHCP_FETCH_LDAP_CERT" ] ; then
    exit 0
fi

case $reason in
    BOUND|RENEW|REBIND|REBOOT)
    /etc/init.d/fetch-ldap-cert start
    ;;
    EXPIRE|FAIL|RELEASE|STOP)
    ;;
esac

Nigel, please test and let us know if it solve your problem.

Btw, can you provide the content of /var/log/syslog on the failing
server?  It should show if there is a race condition.

-- 
Happy hacking
Petter Reinholdtsen