Package: libnss-ldapd
Version: 0.6.9
Severity: important

A recent upgrade tried to install this again (I had it on hold, and
forgot to report it - sorry).  It happens on most all my boxes, which
isn't surprising since I use cfengine to manage the config files.

Preparing to replace libnss-ldapd 0.6.8 (using .../libnss-ldapd_0.6.9_i386.deb) 
...
 * Stopping nss-ldapd connection daemon nslcd
 * [ ok ] 
Unpacking replacement libnss-ldapd ...
Processing triggers for man-db ...
Setting up libnss-ldapd (0.6.9) ...
 * Restarting Name Service Cache Daemon nscd
 * [ ok ] 
 * Starting nss-ldapd connection daemon nslcd
 * nslcd: /etc/nss-ldapd.conf:39: option tls_checkpeer is deprecated
 * (and will be removed in an upcoming release), use tls_reqcert instead
nslcd: /etc/nss-ldapd.conf:40: option tls_cacertdir is currently
untested (please report any successes)
/etc/init.d/nslcd: line 48: 19917 Segmentation fault
start-stop-daemon --start --oknodo --pidfile $NSLCD_PIDFILE --startas
$NSLCD_BIN
                                                                                
   [fail]

So I downgraded back to testing:
...
dpkg: warning: downgrading libnss-ldapd from 0.6.9 to 0.6.8.
Preparing to replace libnss-ldapd 0.6.9 (using .../libnss-ldapd_0.6.8_i386.deb) 
...
 * Stopping nss-ldapd connection daemon nslcd
 * No nslcd found running; none killed.
                                                                                
   [ ok ]
Unpacking replacement libnss-ldapd ...
Processing triggers for man-db ...
Setting up libnss-ldapd (0.6.8) ...
 * Restarting Name Service Cache Daemon nscd
 * [ ok ] 
 * Starting nss-ldapd connection daemon nslcd
 * nslcd: /etc/nss-ldapd.conf:39: option tls_checkpeer is deprecated
 * (and will be removed in an upcoming release), use tls_reqcert instead
nslcd: /etc/nss-ldapd.conf:40: option tls_cacertdir is currently
untested (please report any successes)
                                                                                
   [ ok ]

grep -v '^#' /etc/nss-ldapd.conf | grep -v '^$'
uri ldapi:///
base dc=example,dc=org
ldap_version 3
binddn cn=NSS,ou=DSA,dc=example,dc=org
bindpw <I'd rather not, thank you>
scope passwd sub
scope shadow one
scope group  one
filter passwd (objectClass=posixAccount)
filter shadow (objectClass=posixAccount)
filter group  (objectClass=posixGroup)
base passwd ou=Users,dc=example,dc=org
base shadow ou=Users,dc=example,dc=org
base group  ou=Groups,dc=example,dc=org
ssl off
tls_checkpeer no
tls_cacertdir /etc/ssl/certs
uid nslcd
gid nslcd

Any thing else you'd like to see ?


-- System Information:
Debian Release: squeeze/sid
  APT prefers testing-proposed-updates
  APT policy: (500, 'testing-proposed-updates'), (500, 'proposed-updates'), 
(500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.29.4 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libnss-ldapd depends on:
ii  adduser               3.110              add and remove users and groups
ii  debconf [debconf-2.0] 1.5.26             Debian configuration management sy
ii  libc6                 2.9-13             GNU C Library: Shared libraries
ii  libgssapi-krb5-2      1.7dfsg~beta3-1    MIT Kerberos runtime libraries - k
ii  libldap-2.4-2         2.4.15-1.ocdc1+sid OpenLDAP libraries
ii  libsasl2-2            2.1.23.dfsg1-1     Cyrus SASL - authentication abstra

Versions of packages libnss-ldapd recommends:
ii  libpam-ldap                   184-8      Pluggable Authentication Module fo
ii  nscd                          2.9-13     GNU C Library: Name Service Cache 

libnss-ldapd suggests no packages.

-- debconf information:
* libnss-ldapd/ldap-base: dc=example,dc=org
* libnss-ldapd/nsswitch: passwd, group, shadow
  libnss-ldapd/ldap-binddn: cn=NSS,ou=DSA,dc=example,dc=org
* libnss-ldapd/ldap-uris: ldapi:///
  libnss-ldapd/clean_nsswitch: false



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to