Bugzilla Bug 49349

When I upgraded from 207-r1 to 215-r1 samba(logging to domain) stop working, mc
doesn't starting and impossible to log to this machine over ssh.
Of course a have at /etc/nsswitch.conf such strings
--
passwd:      compat ldap
shadow:      compat ldap
group:       compat ldap
--

I've downgraded to 207-r1 fastly.


Reproducible: Always
Steps to Reproduce:
1. emerge nss_ldap
2. Of course it's nesessary to setup openldap as this
http://forums.gentoo.org/viewtopic.php?t=72607&highlight=nssldap+pam
3. run mc, try to connect to this machine by ssh.

Actual Results:  
With run of mc i've got
mc: relocation error: /lib/libnss_ldap.so.2: undefined symbol:
__db185_open_4001
When I connect by ssh I've got
onnection reset by peer
lost connection.

Expected Results:  
On mc - panels, work environment.

Portage 2.0.50-r6 (default-x86-2004.0, gcc-3.3.2, glibc-2.3.2-r9, 2.4.20-evms)
=================================================================
System uname: 2.4.20-evms i686 Intel(R) Pentium(R) III CPU family      1133MHz
Gentoo Base System version 1.4.9
distcc 2.13 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [enabled]
Autoconf: sys-devel/autoconf-2.58-r1
Automake: sys-devel/automake-1.8.3
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CFLAGS="-march=pentium3 -O3 -pipe -fomit-frame-pointer -falign-functions=4
-mfpmath=sse -mmmx -msse"
CHOST="i686-pc-linux-gnu"
COMPILER="gcc3"
CONFIG_PROTECT="/etc /usr/X11R6/lib/X11/xkb /usr/kde/2/share/config
/usr/kde/3/share/config /usr/share/config /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-march=pentium3 -O2 -pipe -fomit-frame-pointer -falign-functions=4
-mfpmath=sse -mmmx -msse"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs buildpkg ccache distcc sandbox"
GENTOO_MIRRORS="http://gentoo.mirror.sdv.fr
http://linux.rz.ruhr-uni-bochum.de/download/gentoo-mirror/
http://gentoo.spb.ru/
http://mirror.gentoo.ru/pub/mirror/gentoo/
ftp://mirror.gentoo.ru/pub/mirror/gentoo/"
MAKEOPTS="-j7"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/usr/local/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X509 apache1 apm berkdb cdr crypt gdbm gif guile java jpeg ldap libg++
libwww mbox mysql ncurses nls openssh pam perl png postgres python readline
samba slang ssl tcpd truetype x86 xml xml2 zlib"

I have the same Problem on two PCs with LDAP/Kerberos user management.
After update to nss_ldap-215-r1 a lot of things are 
unuseable (ssh telnet imap...), including emerge !!!
-------------------------------------------------
...
>>> net-libs/nss_ldap-215-r1 merged.

 net-libs/nss_ldap
    selected: 207-r1
   protected: 215-r1
     omitted: none
...
>>> emerge (2 of 2) net-analyzer/netcat-110-r5 to /
>>> md5 src_uri ;-) nc110.tgz
>>> md5 src_uri ;-) netcat-110-deb-patches.tbz2
>>> Unpacking source...
>>> Unpacking nc110.tgz to /var/tmp/portage/netcat-110-r5/work/nc-110
tar: relocation error: /lib/libnss_ldap.so.2: undefined symbol: __db185_open

!!! ERROR: net-analyzer/netcat-110-r5 failed.
!!! Function unpack, Line 322, Exitcode 127
!!! failure unpacking nc110.tgz

root@hugo:~ 1082#
gzip: stdout: Broken pipe
-----------------------------------------------------------------------------------------------------
To make the system useable, I had to restore /lib/libnss_ldap* from a backup.

realy ugly bug for a remote pc...

Same here using 215-r1

getent: relocation error: /lib/libnss_ldap.so.2: undefined symbol: __db185_open_4001

I am currently running 215-r1 without any problems.  It is possible that you
have done a db upgrade or 2 recently or things are linked to db3 instead of
db4.

same error appeared with db-4.2 on my environment.
(db-4.2 is in package.mask now)

Any updates on this? It seems to be an issue for nss_ldap > 211 and db4.2 only.
I have 207 linked against db4.2 running without problems. The problem is that
openldap >= 2.2 depends on db4.2, so the db4.2 issue is somewhat blocking...

somebody with the problem, please post output of:

build nss_ldap with FEATURES=nostrip USE=debug
post the output of: 
'ldd /lib/libnss_ldap.so.2'

and ATTACH (don't dump it all here) the output of:
 'nm /lib/libnss_ldap.so.2'

no response, closing.
please re-test with latest nss_ldap/pam_ldap before re-opening.

        linux-gate.so.1 =>  (0xffffe000)
        libldap-2.2.so.7 => /usr/lib/libldap-2.2.so.7 (0xb7fb8000)
        liblber-2.2.so.7 => /usr/lib/liblber-2.2.so.7 (0xb7fad000)
        libdb-4.2.so => /usr/lib/libdb-4.2.so (0xb7ee6000)
        libdl.so.2 => /lib/libdl.so.2 (0xb7ee3000)
        libnsl.so.1 => /lib/libnsl.so.1 (0xb7ed1000)
        libresolv.so.2 => /lib/libresolv.so.2 (0xb7ec1000)
        libc.so.6 => /lib/libc.so.6 (0xb7dc5000)
        libssl.so.0.9.7 => /usr/lib/libssl.so.0.9.7 (0xb7d9a000)
        libcrypto.so.0.9.7 => /usr/lib/libcrypto.so.0.9.7 (0xb7cba000)
        /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x80000000)

Created an attachment (id=43936) [edit]
output of nm

[ebuild   R   ] net-libs/nss_ldap-215-r1  +berkdb -debug* 0 kB
[ebuild   R   ] net-libs/pam_ldap-156  0 kB


(of course debug was on)

*** Bug 72647 has been marked as a duplicate of this bug. ***

reopened as per bug 72647

updating to the latest version of nss_ldap on the portage solved my problem.

perhaps it's ready to be moved to x86?

220 in stable now.