[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#407788: marked as done (x11-common init script cause bootup hang when using nss_ldap for LDAP-based user and groups)

Your message dated Fri, 30 May 2008 13:32:03 +0000
with message-id <E1K24iB-0006ai-L3@ries.debian.org>
and subject line Bug#407788: fixed in xorg 1:7.3+11
has caused the Debian Bug report #407788,
regarding x11-common init script cause bootup hang when using nss_ldap for LDAP-based user and groups
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
407788: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=407788
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: x11-common
Version: 1:7.1.0-10
Severity: important


My first Debian bug report - so kindly ask for patient.

We use nss_ldap for getting our OpenLDAP users available on the Linux
boxes.

During bootup x11-common init script invokes two times

   chown 0:0 $SOCKET_DIR
   chown 0:0 $ICE_DIR

which looks like to cause NSS to reverse lookup the user and
group behind 0. As the network hasn't started yet or isn't connected the
box hangs for a very long time in this step (it works to press CTRL+C,
but for a remote box this is not always possible).

I recompiled libnss-ldap with debugging enabled which shows up several
queries which are looking for a user during haning around in x11-common:

(&(objectClass=posixAccount)(uid=0)
and after a timeout
(&(objectClass=posixAccount)(cn=0) 

Simply changing these lines to

   chown root:root

is a quick fix for that issue. But I guess somebody had a reason to use
0:0 for this - most probably to avoid forward lookups user -> id.

Basically I'm not sure why this hang happens. Why should a chown with
id's cause a reverse lookup. 

/etc/nsswitch.conf say - first "files", second "ldap":
passwd:         files ldap
group:          files ldap

"root" is indeed in the local files:
unki@testdebian:~$ grep root /etc/passwd
root:x:0:0:root:/root:/bin/bash
unki@testdebian:~$ grep root /etc/group
root:x:0:

Furthermore we have specified in libnss-ldap.conf the parameter 
"nss_initgroups_ignoreusers root" which cause nss_ldap to not do
group enumerations for the user "root" - but it looks like this
parameter is ignored on a reverse lookup.

Regards,
Andreas

-- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-3-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages x11-common depends on:
ii  debconf [debconf-2.0]         1.5.11     Debian configuration management sy
ii  debianutils                   2.17       Miscellaneous utilities specific t
ii  lsb-base                      3.1-22     Linux Standard Base 3.1 init scrip

x11-common recommends no packages.

-- debconf information excluded

--- End Message ---
--- Begin Message --- 
Source: xorg
Source-Version: 1:7.3+11

We believe that the bug you reported is fixed in the latest version of
xorg, which is due to be installed in the Debian FTP archive:

libglu1-xorg-dev_7.3+11_all.deb
  to pool/main/x/xorg/libglu1-xorg-dev_7.3+11_all.deb
libglu1-xorg_7.3+11_all.deb
  to pool/main/x/xorg/libglu1-xorg_7.3+11_all.deb
x11-common_7.3+11_all.deb
  to pool/main/x/xorg/x11-common_7.3+11_all.deb
xbase-clients_7.3+11_all.deb
  to pool/main/x/xorg/xbase-clients_7.3+11_all.deb
xlibmesa-gl-dev_7.3+11_all.deb
  to pool/main/x/xorg/xlibmesa-gl-dev_7.3+11_all.deb
xlibmesa-gl_7.3+11_all.deb
  to pool/main/x/xorg/xlibmesa-gl_7.3+11_all.deb
xlibmesa-glu_7.3+11_all.deb
  to pool/main/x/xorg/xlibmesa-glu_7.3+11_all.deb
xorg-dev_7.3+11_all.deb
  to pool/main/x/xorg/xorg-dev_7.3+11_all.deb
xorg_7.3+11.dsc
  to pool/main/x/xorg/xorg_7.3+11.dsc
xorg_7.3+11.tar.gz
  to pool/main/x/xorg/xorg_7.3+11.tar.gz
xorg_7.3+11_i386.deb
  to pool/main/x/xorg/xorg_7.3+11_i386.deb
xserver-xorg-input-all_7.3+11_i386.deb
  to pool/main/x/xorg/xserver-xorg-input-all_7.3+11_i386.deb
xserver-xorg-video-all_7.3+11_i386.deb
  to pool/main/x/xorg/xserver-xorg-video-all_7.3+11_i386.deb
xserver-xorg_7.3+11_i386.deb
  to pool/main/x/xorg/xserver-xorg_7.3+11_i386.deb
xutils_7.3+11_all.deb
  to pool/main/x/xorg/xutils_7.3+11_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 407788@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Julien Cristau <jcristau@debian.org> (supplier of updated xorg package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Fri, 30 May 2008 15:15:33 +0200
Source: xorg
Binary: x11-common xserver-xorg xserver-xorg-video-all xserver-xorg-input-all xorg xorg-dev xlibmesa-gl xlibmesa-gl-dev xlibmesa-glu libglu1-xorg libglu1-xorg-dev xbase-clients xutils
Architecture: source all i386
Version: 1:7.3+11
Distribution: unstable
Urgency: low
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Julien Cristau <jcristau@debian.org>
Description: 
 libglu1-xorg - transitional package for Debian etch
 libglu1-xorg-dev - transitional package for Debian etch
 x11-common - X Window System (X.Org) infrastructure
 xbase-clients - miscellaneous X clients - metapackage
 xlibmesa-gl - transitional package for Debian etch
 xlibmesa-gl-dev - transitional package for Debian etch
 xlibmesa-glu - transitional package for Debian etch
 xorg       - X.Org X Window System
 xorg-dev   - the X.Org X Window System development libraries
 xserver-xorg - the X.Org X server
 xserver-xorg-input-all - the X.Org X server -- input driver metapackage
 xserver-xorg-video-all - the X.Org X server -- output driver metapackage
 xutils     - X Window System utility programs metapackage
Closes: 382360 400632 407788 418123 459507 463630 469972 470940 473701 477492 477547 477550 478035
Changes: 
 xorg (1:7.3+11) unstable; urgency=low
 .
   [ David Nusinow ]
   * Add radeonhd to the -video-all depends
 .
   [ Brice Goglin ]
   * Remove $named from the Should-Start/Stop LSB dependency info of the
     x11-common init script, closes: #463630.
   * Remove $remote_fs from Required-Start/Stop LSB dependency info of
     the x11-common init script, closes: #470940.
   * Remove the dependency of xutils against xutils-dev, it was only useful
     for transitional purpose in Etch, closes: #418123.
   * Remove the obsolete /etc/init.d/xserver-xorg, closes: #459507.
   * Add xutils preinst to drop obsolete /etc/X11/rstart/ files,
     closes: #382360.
 .
   [ David Nusinow ]
   * Ship the X server wrapper in xserver-xorg rather than x11-common. This
     avoids having an unnecessary SUID binary on some systems. Thanks Stephen
     Frost. closes: #400632
     + Have x11-common conflict with older xserver-xorg and vice-versa. Also
       have xserver-xorg replace older x11-common
     + Set x11-common to arch: all and xserver-xorg to arch: any
     + Move ${shlib:Depends} from x11-common to xserver-xorg
 .
   [ Julien Cristau ]
   * Use root:root instead of 0:0 in chown calls in x11-common's init script.
     This should prevent remote nss lookups and timeouts in some environments.
     Closes: #407788.
   * Add Kurdish debconf translation from Erdal Ronahi (closes: #477492).
   * Move dexconf and its manpage from x11-common to xserver-xorg.
   * Remove pre-dependency on x11-common from xserver-xorg.
   * Drop the xlibs-data and xlibs-static-dev transitional packages.  These
     were kept around for the sarge->etch upgrade, so it's past time they went
     away (closes: #477547, #477550).
   * xserver-xorg-video-newport is mips-only, don't depend on it on other
     architectures.
   * dexconf, xserver-xorg.postinst: the emulate3buttons question is gone,
     don't ask about it and don't add the corresponding option in the generated
     xorg.conf.  The option is on by default, and the only thing we used to do
     in dexconf is to explicitly enable it anyway.
   * Run dh_installman in binary-indep as well, as x11-common is now built
     there.
   * Use the XSF shell library to remove obsolete conffiles.  It seems less
     fragile than the version recommended on
     http://wiki.debian.org/DpkgConffileHandling and should handle failed
     upgrades.
 .
   [ Christian Perrier ]
   * Debconf translations:
     - Indonesian added. Closes: #469972
     - Polish. Closes: #478035
 .
   [ Raphael Geissert ]
   * Fix bashism in xserver-xorg postinst script, closes: #473701.
Checksums-Sha1: 
 c8b45eb6a385ca559a6e4ddf0e6f54a0a5bc7412 1076 xorg_7.3+11.dsc
 7507bde197affa84787c8c9ee0b62e9fac7cd23c 1036614 xorg_7.3+11.tar.gz
 ab2674ffff5adde364f8c38e48b07f3dd3c9fc97 338944 x11-common_7.3+11_all.deb
 070c1c0113f6f7f1465f6760740724e9108c8adb 26276 xorg-dev_7.3+11_all.deb
 5d4ab1c38e69a907d3b735f821ab4f0f0563cd11 25814 xlibmesa-gl_7.3+11_all.deb
 4d79918f85b7d26a942823304a56e9966c03f2c0 25816 xlibmesa-gl-dev_7.3+11_all.deb
 4ea5f4b883cf2db8f809cba9862df143e8926b25 25814 xlibmesa-glu_7.3+11_all.deb
 ed9f5513870e9e8611c86499cfcfb73fa2e68e71 25804 libglu1-xorg_7.3+11_all.deb
 4aeb25763370127e496a948fa2e6409f4be234d1 25810 libglu1-xorg-dev_7.3+11_all.deb
 942c3bd103305d94c073cfe524dbffb67b045ab7 26048 xbase-clients_7.3+11_all.deb
 d5d7123dba151c6d19f424d29dcd36665801e9e7 35054 xutils_7.3+11_all.deb
 c947f637ccf5822fa616d3ddbd4e913aabe72262 222752 xserver-xorg_7.3+11_i386.deb
 210032c3c052bba5801b1912846a25f9f7aeb4a3 26050 xserver-xorg-video-all_7.3+11_i386.deb
 fc79b2e38730b81713a100e1c427b197110a0197 25888 xserver-xorg-input-all_7.3+11_i386.deb
 d37a3a3c375705195920cbb810a456139c04431e 26116 xorg_7.3+11_i386.deb
Checksums-Sha256: 
 2361955d34d25f8d3d8d866113c2a53c80dfb6470da9d01933b7c7c39fbb2573 1076 xorg_7.3+11.dsc
 5fae0620d05061be2aead558c12366a5d1f0411e884e6444a05e32d82de1f078 1036614 xorg_7.3+11.tar.gz
 e20e01a99ef17709c8c1788449119e2104512cc90802db988f1cca1ee5a8ebbc 338944 x11-common_7.3+11_all.deb
 0ac694a36ffc0b9c9bec44b5af76d00f081dcacdccf4d82e0b733cc31db33e87 26276 xorg-dev_7.3+11_all.deb
 afc52ef48d02f0183834f1dfe3657befeb8644eaf16d71e44b73ef0d4d93d023 25814 xlibmesa-gl_7.3+11_all.deb
 c0323345ed6d2d11e0aeac1ff0714a2f4a585d860129b923c91924667e2b41c0 25816 xlibmesa-gl-dev_7.3+11_all.deb
 c72d559496370f6a2b56255ff65c976efe7b9488eaf1a1fe7fc90d12afd337b2 25814 xlibmesa-glu_7.3+11_all.deb
 1e39f704e9336e8ae6bd2808c9191026e80f641dd7de46acb9d6821379a8ced6 25804 libglu1-xorg_7.3+11_all.deb
 96540eef04cf79b2e0d96b26d4ff225c3311e99a3ff3ffe70f3281bf46616925 25810 libglu1-xorg-dev_7.3+11_all.deb
 98c88fc2d034687b503c35a96ca37029f1c8eb413a1b1690ad64acc5cd28f967 26048 xbase-clients_7.3+11_all.deb
 007ac0fb0a09b79590480f11c7ff193a11c8a6a14f25fc05414605e6cffcd1d1 35054 xutils_7.3+11_all.deb
 7007ed5ad04c8ef747809616c137f87e7dfd4789d684bf57b4b6261aa0bf368a 222752 xserver-xorg_7.3+11_i386.deb
 e3bb4bc45415cf632e5eba5566de5acefebf74a72493d1bc8c7cec22a31e3048 26050 xserver-xorg-video-all_7.3+11_i386.deb
 11679ca701e9ecdc5a03b03c482138f7e1129a3134fca048b7568e796ea088d7 25888 xserver-xorg-input-all_7.3+11_i386.deb
 2c6ec53c3f2793a2c6c777ad2ef8c7ada5c81999e60a091e6edd14cf59734789 26116 xorg_7.3+11_i386.deb
Files: 
 24b18bccdfdc056bfea48f0a1f1f271b 1076 x11 optional xorg_7.3+11.dsc
 65d58311884c5ad0121845136a9a449a 1036614 x11 optional xorg_7.3+11.tar.gz
 e808f1dbb0826954f385869dfc9caf95 338944 x11 optional x11-common_7.3+11_all.deb
 c545bcb7a1fdebf280774dc66376a214 26276 x11 optional xorg-dev_7.3+11_all.deb
 eb1775e606b9981080934bd15ab4c33b 25814 libs optional xlibmesa-gl_7.3+11_all.deb
 d369a5d1b104bf60692334b8cb3eb063 25816 libdevel optional xlibmesa-gl-dev_7.3+11_all.deb
 b630297fee11d898a27d6c02e237c030 25814 libdevel optional xlibmesa-glu_7.3+11_all.deb
 c70f2c38b0ba6e9aff75f4288acad601 25804 libs optional libglu1-xorg_7.3+11_all.deb
 b56a27e3e1ed0b83a7d3d6ba74bef440 25810 libdevel optional libglu1-xorg-dev_7.3+11_all.deb
 f6e769eee85e4c5a1938065eb4f8fbd5 26048 x11 optional xbase-clients_7.3+11_all.deb
 10108ec9155aefb473dca20873197843 35054 x11 optional xutils_7.3+11_all.deb
 0f8b7fa8b6f6f3fe868442122a4fb424 222752 x11 optional xserver-xorg_7.3+11_i386.deb
 081d3f829cd65e99060c68e08e97bd3b 26050 x11 optional xserver-xorg-video-all_7.3+11_i386.deb
 426dbc5946b7ae604a170e2a86a4a03c 25888 x11 optional xserver-xorg-input-all_7.3+11_i386.deb
 c44ec7f40521328798c3e4b693187a8c 26116 x11 optional xorg_7.3+11_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFIQAD9mEvTgKxfcAwRArzAAKCLYNJg3cdBai+FTlgdAL/fF3MtyACgoVR7
avA1sGZclMhol2HCSx6Hy2U=
=W+UC
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: