[Bug 1088154] Re: LDAP support broken in rpc.idmapd

[Ashish SHUKLA]

I'm able to triage this bug, and it seems like the culprit is `conf_*`
functions present in conffile.c (nfs-utils), which are also present in
cfg.c (libnfsidmap2), and due to runtime linking, `conf_*` present in
`rpc.idmapd` executable (nfs-utils) takes precedence over the `conf_*`
functions present in `/lib/libnfsidmap.so.0` due to symbol search order,
and therefore complicating configuration parsing.

The diff attached marks the `conf_*` functions, present in `conffile.c`
which seem to conflict with functions present in `cfg.c`, as `static`,
and therefore fixing the conflict.

For the record, I'm running `Ubuntu Precise`.

Thanks

** Patch added: "Fix (in quilt format, needs to go in debian/patches)"
   https://bugs.launchpad.net/ubuntu/+source/nfs-utils/+bug/1088154/+attachment/3461680/+files/20-conffile.patch

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to nfs-utils in Ubuntu.
https://bugs.launchpad.net/bugs/1088154

Title:
  LDAP support broken in rpc.idmapd

Status in “nfs-utils” package in Ubuntu:
  Confirmed

Bug description:
  Hi,

  I'm trying to use LDAP support in rpc.idmapd, and I get following
  errors:

  % tail -6 /var/log/daemon.log
  Dec  9 10:18:53 bk0-srv rpc.idmapd[24360]: libnfsidmap: using domain: domain.tld
  Dec  9 10:18:53 bk0-srv rpc.idmapd[24360]: libnfsidmap: Realms list: 'DOMAIN.TLD'
  Dec  9 10:18:53 bk0-srv rpc.idmapd[24360]: libnfsidmap: processing 'Method' list
  Dec  9 10:18:53 bk0-srv rpc.idmapd[24360]: umichldap_init: Missing required information: LDAP_server LDAP_base
  Dec  9 10:18:53 bk0-srv rpc.idmapd[24360]: libnfsidmap: Failed in /lib/libnfsidmap/umich_ldap.so's init(), returned -1
  Dec  9 10:18:53 bk0-srv rpc.idmapd[24360]: libnfsidmap: requested translation method, 'umich_ldap', is not available

  Following is idmapd.conf(5):

  % cat /etc/idmapd.conf
  [General]

  Verbosity = 10
  Pipefs-Directory = /run/rpc_pipefs
  Domain = domain.tld
  # set your own domain here, if id differs from FQDN minus hostname
  # Domain = localdomain

  [Translation]

  Method = umich_ldap, nsswitch

  [UMICH_SCHEMA]

  LDAP_server = ldap.domain.tld
  LDAP_base = dc=domain,dc=tld

  [Mapping]

  Nobody-User = nobody
  Nobody-Group = nogroup

  I'm not sure why rpc.idmapd complains about lack of LDAP_server,
  LDAP_base keys when they're present in the corresponding section
  ("UMICH_SCHEMA")

  Thanks in advance

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nfs-utils/+bug/1088154/+subscriptions