Package: libnss-ldapd Version: 0.6.3 Severity: important User: [EMAIL PROTECTED] Usertag: debian-edu
Hi. When using a backport of 0.6.3 with active directory, the user name of users in LDAP/AD do not show up when I use 'ps' to list processes. Here is an example. Notice how there UID of the klipper process is numeric, while it should show the username. ltsp:~# /etc/init.d/nslcd stop ltsp:~# nslcd -d & [1] 4668 ltsp:~# nslcd: DEBUG: add_uri(ldap://ad5.skolen.local/) nslcd: DEBUG: add_uri(ldap://ad1.skolen.local/) nslcd: DEBUG: add_uri(ldap://ad7.skolen.local/) nslcd: DEBUG: add_uri(ldap://ad2.skolen.local/) nslcd: DEBUG: add_uri(ldap://ad3.skolen.local/) nslcd: DEBUG: add_uri(ldap://ad4.skolen.local/) nslcd: DEBUG: add_uri(ldap://ad8.skolen.local/) nslcd: version 0.6.3 starting nslcd: DEBUG: unlink() of /var/run/nslcd/socket failed (ignored): No such file or directory nslcd: DEBUG: setgroups(0,NULL) done nslcd: DEBUG: setgid(115) done nslcd: DEBUG: setuid(110) done nslcd: accepting connections ltsp:~# ps -fp25165 nslcd: [8b4567] DEBUG: connection from pid=4683 uid=0 gid=0 nslcd: [8b4567] DEBUG: nslcd_passwd_byuid(511149) nslcd: [8b4567] DEBUG: myldap_search(base="DC=SKOLEN,DC=LOCAL", filter="(&(&(objectClass=user)(uidNumber=*)(unixHomeDirectory=*))(uidNumber=511149))") nslcd: [8b4567] DEBUG: simple bind to ldap://ad5.skolen.local/ as cn=svc.adbind,ou=servicekonti,ou=brukere,ou=i2-drift,DC=SKOLEN,DC=LOCAL nslcd: [8b4567] connected to LDAP server ldap://ad5.skolen.local/ nslcd: [8b4567] DEBUG: ldap_result(): end of results UID PID PPID C STIME TTY TIME CMD 511149 25165 1 0 Jun27 ? 00:00:00 klipper [kdeinit] ltsp:~# ltsp:~# fg nslcd -d nslcd: caught signal SIGINT (2), shutting down nslcd: version 0.6.3 bailing out ltsp:~# I checked, and nscd is not running. Using a manual LDAP search with the given filter give this object content: dn: CN=x-xxx-elev3,OU=Brukere,OU=XXX,OU=Skoler,OU=I2-Produksjon,DC=SKOLEN,DC=L OCAL objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user cn: x-xxx-elev3 sn: Elev title: Elev description: Test pupil at school postalCode: 100/100/11 givenName: Test distinguishedName: CN=x-xxx-elev3,OU=Brukere,OU=XXX,OU=Skoler,OU=I2-Produksjon ,DC=SKOLEN,DC=LOCAL instanceType: 4 whenCreated: 20080602094513.0Z whenChanged: 20080704101954.0Z displayName: Test Elev uSNCreated: 726620195 memberOf: CN=XXX-RO-ELEVER,OU=Roller,OU=Grupper,OU=XXX,OU=Skoler,OU=I2-Produks jon,DC=SKOLEN,DC=LOCAL uSNChanged: 744992501 department: Some school name: x-xxx-elev3 objectGUID:: vLW9hku/eUWCvaD5sSVDWw== userAccountControl: 66080 badPwdCount: 0 codePage: 0 countryCode: 0 homeDirectory: \\nfsserver\Brukere04\x-xxx-elev3 homeDrive: Z: badPasswordTime: 0 lastLogoff: 0 lastLogon: 128587760353055907 pwdLastSet: 0 primaryGroupID: 513 userParameters:: Q3R4Q2ZnUHJlc2VudCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgI CAgUAMaCAFDdHhDZmdQcmVzZW5045S15pSx5oiw44GiGAgBQ3R4Q2ZnRmxhZ3Mx44Cw44Gm44Cy44 C5IE4BQ3R4V0ZQcm9maWxlUGF0aOaMteaMteaUtuaYtuOMt+OAs+OYs+OYtuOQs+OYtuOMt+OAs+O Es+aMteOQteOMteOAteOIt+aYtuOYtuOktuaMtuOUtuOIt+OAs+OEs+aMteOgt+aQsuOAt+OIt+Ok tuaQsuOUtuaMtuOUtuOYt+OMs+OAsA== profilePath: \\profileserver\Profiles$\x-xxx-elev3 objectSid:: AQUAAAAAAAUVAAAAx0rGCIJyOj/Y8+zvrcwGAA== accountExpires: 9223372036854775807 logonCount: 1 sAMAccountName: x-xxx-elev3 sAMAccountType: 805306368 userPrincipalName: [EMAIL PROTECTED] objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=SKOLEN,DC=LOCAL lastLogonTimestamp: 128596403920430646 loginShell: /bin/bash gidNumber: 5000 unixHomeDirectory: /ude/nfsserver/Brukere04/x-xxx-elev3/UnixHome uidNumber: 511149 # refldap://ForestDnsZones.SKOLEN.LOCAL/DC=ForestDnsZones,DC=SKOLEN,DC=LOCAL # refldap://DomainDnsZones.SKOLEN.LOCAL/DC=DomainDnsZones,DC=SKOLEN,DC=LOCAL # refldap://SKOLEN.LOCAL/CN=Configuration,DC=SKOLEN,DC=LOCAL This is the content of nss-ldapd.conf and nsswitch.conf: ======================= nss-ldapd.conf ============================================= # Generated by /usr/sbin/enable-active-directory uri ldap://ad3.skolen.local/ uri ldap://ad2.skolen.local/ uri ldap://ad7.skolen.local/ uri ldap://ad6.skolen.local/ uri ldap://ad1.skolen.local/ uri ldap://ad5.skolen.local/ uri ldap://ad8.skolen.local/ uri ldap://ad4.skolen.local/ base DC=SKOLEN,DC=LOCAL referrals no idle_timelimit 60 pagesize 1000 filter passwd (&(objectClass=user)(uidNumber=*)(unixHomeDirectory=*)) map passwd uid cn map passwd homeDirectory unixHomeDirectory map passwd gecos displayName filter shadow (&(objectClass=user)(uidNumber=*)(unixHomeDirectory=*)) map shadow uid sAMAccountName map shadow shadowLastChange pwdLastSet filter group (&(objectClass=group)(gidNumber=*)) map group uniqueMember member binddn cn=svc.adbind,ou=servicekonti,ou=brukere,ou=i2-drift,DC=SKOLEN,DC=LOCAL bindpw public ======================= nsswitch.conf ============================================== # Generated by /usr/sbin/enable-active-directory passwd: files ldap group: files ldap shadow: files ldap netgroup: files ldap automount: files ldap hosts: files dns networks: files protocols: files services: files ethers: files rpc: files ==================================================================================== Any more you I can collect to debug this? Happy hacking, -- Petter Reinholdtsen -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
