[Bug 1445041] [NEW] Can HAVE_LDAP_INITIALIZE be defined by default?

[Deric Sullivan]

Public bug reported:

Hello,  I'm not sure if this is a bug or a wishlist item.

I'm having issues upon bootup with a service daemon freezing (ntpd in
this case).  I think the problem would go away (not necessarily fixed
but no longer seen at least) if libnss-ldap was built with
HAVE_LDAP_INITIALIZE defined (in config.h.in).  Since OpenLDAP libraries
are a "depneds" for libnss-ldap, and since OpenLDAP has
ldap_initialize() (and ldap_init() while we're at it), then why not
activate these features by default?


I can provide lots of information about my particular problem symptoms with ntpd if needed.

# lsb_release -rd
Description:    Ubuntu 14.04.2 LTS
Release:        14.04
#
# apt-cache policy libnss-ldap
libnss-ldap:
  Installed: 264-2.2ubuntu4.14.04.1
  Candidate: 264-2.2ubuntu4.14.04.1
  Version table:
 *** 264-2.2ubuntu4.14.04.1 0
        500 http://<my_apt_server>/staging/ubuntu/ trusty-updates/main amd64 Packages
        100 /var/lib/dpkg/status
     264-2.2ubuntu4 0
        500 http://<my_apt_server>/staging/ubuntu/ trusty/main amd64 Packages
# 

What I expected to happen:
No connection be made to an LDAP server due to a call to initgroups() by a process whose uid/username is listed in nss_initgroups_ignoreusers in the /etc/ldap.conf file.

What happened instead:
It seems that a connection is made anyways.


Thank you,
Deric Sullivan

** Affects: libnss-ldap (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to libnss-ldap in Ubuntu.
https://bugs.launchpad.net/bugs/1445041

Title:
  Can HAVE_LDAP_INITIALIZE be defined by default?

Status in libnss-ldap package in Ubuntu:
  New

Bug description:
  Hello,  I'm not sure if this is a bug or a wishlist item.

  I'm having issues upon bootup with a service daemon freezing (ntpd in
  this case).  I think the problem would go away (not necessarily fixed
  but no longer seen at least) if libnss-ldap was built with
  HAVE_LDAP_INITIALIZE defined (in config.h.in).  Since OpenLDAP
  libraries are a "depneds" for libnss-ldap, and since OpenLDAP has
  ldap_initialize() (and ldap_init() while we're at it), then why not
  activate these features by default?

  
  I can provide lots of information about my particular problem symptoms with ntpd if needed.

  # lsb_release -rd
  Description:    Ubuntu 14.04.2 LTS
  Release:        14.04
  #
  # apt-cache policy libnss-ldap
  libnss-ldap:
    Installed: 264-2.2ubuntu4.14.04.1
    Candidate: 264-2.2ubuntu4.14.04.1
    Version table:
   *** 264-2.2ubuntu4.14.04.1 0
          500 http://<my_apt_server>/staging/ubuntu/ trusty-updates/main amd64 Packages
          100 /var/lib/dpkg/status
       264-2.2ubuntu4 0
          500 http://<my_apt_server>/staging/ubuntu/ trusty/main amd64 Packages
  # 

  What I expected to happen:
  No connection be made to an LDAP server due to a call to initgroups() by a process whose uid/username is listed in nss_initgroups_ignoreusers in the /etc/ldap.conf file.

  What happened instead:
  It seems that a connection is made anyways.

  
  Thank you,
  Deric Sullivan

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libnss-ldap/+bug/1445041/+subscriptions