Bug 256401 – sys-auth/nss_ldap-258 does not handle user "groups" lookup properly.

• Status: RESOLVED TEST-REQUEST
• Product: Gentoo Linux

[Description David Fogle 2009-01-26 10:32:00 UTC]

nss_ldap in 2008.0 is of version 258, and this release has an issue with resolving user "groups". From what I have been reading, this is fixed in 260. A simple update should correct this.

Reproducible: Always

Steps to Reproduce:
1.run id <username>


Actual Results:  
(Output of above command)
uid=1000(david) gid=1000(david)id: failed to get groups for user `david': No such file or directory

Expected Results:  
Should have output the information about the secondary groups. 
uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm)


As I stated, this is fixed in version 260. Updating the ebuild to this version is all that should be needed to fix the issus.

[Comment 1 David Fogle 2009-01-26 10:34:09 UTC]

Portage 2.1.6.4 (default/linux/x86/2008.0/server, gcc-4.1.2, glibc-2.6.1-r0, 2.6.27-gentoo-r8 i686)
=================================================================                                  
                        System Settings                                                            
=================================================================                                  
System uname: Linux-2.6.27-gentoo-r8-i686-Intel-R-_Xeon-TM-_CPU_2.66GHz-with-glibc2.0              
Timestamp of tree: Mon, 26 Jan 2009 07:45:02 +0000                                                 
app-shells/bash:     3.2_p17-r1                                                                    
dev-lang/python:     2.4.4-r13                                                                     
dev-python/pycrypto: 2.0.1-r6                                                                      
sys-apps/baselayout: 1.12.11.1                                                                     
sys-apps/sandbox:    1.2.18.1-r2                                                                   
sys-devel/autoconf:  2.63                                                                          
sys-devel/automake:  1.10.1                                                                        
sys-devel/binutils:  2.18-r1                                                                       
sys-devel/gcc-config: 1.4.0-r4                                                                     
sys-devel/libtool:   1.5.24                                                                        
virtual/os-headers:  2.6.23-r3                                                                     
ACCEPT_KEYWORDS="x86"                                                                              
CBUILD="i486-pc-linux-gnu"                                                                         
CFLAGS="-O2 -mtune=pentium-m -pipe"                                                                
CHOST="i486-pc-linux-gnu"                                                                          
CONFIG_PROTECT="/etc"                                                                              
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/terminfo /etc/udev/rules.d"
CXXFLAGS="-O2 -mtune=pentium-m -pipe"                                                                                                                                    
DISTDIR="/usr/portage/distfiles"                                                                                                                                         
FEATURES="distlocks fixpackages parallel-fetch protect-owned sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="ftp://gentoo.chem.wisc.edu/gentoo/ "
LDFLAGS="-Wl,-O1"
MAKEOPTS="-j8"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.namerica.gentoo.org/gentoo-portage"
USE="acl apache2 berkdb bzip2 cli cracklib crypt cups dri fortran gdbm gpm iconv ipv6 isdnlog ldap mailwrapper midi mudflap mysql ncurses nls nptl nptlonly openmp pam pcre perl pppd python readline reflection session snmp spl ssl sysfs tcpd truetype unicode x86 xml xorg zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrackvhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="fbdev glint i810 intel mach64 mga neomagic nv r128 radeon savage sis tdfx trident vesa vga via vmware voodoo"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LANG, LC_ALL, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY

=================================================================
                        Package Settings
=================================================================
>>> Attempting to run pkg_info() for 'sys-auth/nss_ldap-258'
 * pkg_info() is not defined: 'nss_ldap-258.ebuild'

[Comment 2 David Fogle 2009-01-26 10:41:01 UTC]

Also, the current ebuild does not make the /var/db/ncsd directory, which is needed if you want to use persistent caches. Not a hard think to fix, but it is rather undocumented, and for someone that does not know what nscd error messages mean, documentation is lacking. Adding this directory might cut a few bug reports out, even if it would be 3-4 a year.

[Comment 3 Jeroen Roovers (RETIRED) 2009-01-28 21:16:54 UTC]

Stable versions of packages are usually not tied to profiles - in this case the stable version of sys-auth/nss_ldap is specifically not tied to the 2008.0 profiles. Version 262 has been in the tree for months, and maybe it's time to mark that stable. Not CC'ing robbat2 because of metadata.xml silliness.

[Comment 4 Robin Johnson 2009-07-28 16:54:02 UTC]

Did you test that 262 does not have this issue?

That nscd directory should be created by glibc (that owns nscd), not nss_ldap.