Bug 443072 – >=sys-auth/nss-pam-ldapd-0.8.11 USE=-sasl fails to connect to the LDAP server

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Mathias Weigt 2012-11-14 12:14:59 UTC]

After upgrading nss-pam-ldapd from 0.8.10 to 0.8.11 nslcd can't connect to the LDAP-Server anymore. I get the same error messages like in this thread of the upstream-mailing-list:
http://lists.arthurdejong.org/nss-pam-ldapd-users/2012/msg00198.html
There is also a proposal for a patch witch I add to this bug. Please include this into the ebuild of Version 0.8.11

Reproducible: Always

Steps to Reproduce:
1.upgrade from 0.8.10 to 0.8.11 or 0.8.11-r1
2.start nslcd

Actual Results:  
"ldap_set_option(LDAP_OPT_X_SASL_NOCANO
N) failed: Can't contact LDAP server"

Expected Results:  
no error messages and successful connection to LDAP-Server

[Comment 1 Mathias Weigt 2012-11-14 12:16:04 UTC]

Created attachment 329516 [details, diff]
proposed patch for nss-pam-ldapd-0.8.11

[Comment 2 Matthew Thode ( prometheanfire ) 2012-11-14 17:14:48 UTC]

Can you test with the sasl use flag enabled?

[Comment 3 Mathias Weigt 2012-11-14 18:11:14 UTC]

I just testet it. I was surprised that with the sasl use flag "xemacs" was pulled in. 
But it still does not work:
Nov 14 19:05:54 localhost nslcd[8394]: caught signal SIGTERM (15), shutting down
Nov 14 19:05:54 localhost nslcd[8394]: version 0.8.10 bailing out
Nov 14 19:05:54 localhost nslcd[2933]: version 0.8.11 starting
Nov 14 19:05:59 localhost nslcd[2933]: accepting connections
Nov 14 19:05:59 localhost nslcd[2933]: [8b4567] <group/member="nslcd"> ldap_set_option(LDAP_OPT_X_SASL_NOCANON) failed: Can't contact LDAP server
N

[Comment 4 Matthew Thode ( prometheanfire ) 2012-11-15 04:34:10 UTC]

I'm asking if he's going to release a new version soonish, if no response in the next day I will patch 0.8.11 in -r2

also, for refrence
http://arthurdejong.org/viewvc/nss-pam-ldapd?revision=1824&view=revision

[Comment 5 Mathias Weigt 2012-11-15 06:14:34 UTC]

Yeah, I could live with that (waiting for a new upstream-version)...

[Comment 6 Matthew Thode ( prometheanfire ) 2012-11-15 21:43:15 UTC]

I expect the new release to come out in the next couple of days. (this came from upstream)

that good for you then?

[Comment 7 Mathias Weigt 2012-11-16 05:45:42 UTC]

perfect.

[Comment 8 Matthew Thode ( prometheanfire ) 2012-11-19 01:02:15 UTC]

fixed in nss-pam-ldapd-0.8.12

[Comment 9 Mathias Weigt 2012-11-19 06:17:40 UTC]

Yeah it works! Thanks!