[ARM] libnss-ldap misses softlink /lib/libnss_ldap.so.2

[arronax23]

Setting up ldap authentification on precise is impossible as the library softlink /lib/libnss_ldap.so.2 is missing. I presume that this spftlink should be created ny the package libnss-ldap.
Fix:
ln -s /lib/arm-linux-gnueabihf/nss_ldap.so /lib/libnss_ldap.so.2
Relase:
Description: Ubuntu 12.04 LTS
Release: 12.04

[Robie Basak (racb)]

Thank you for taking the time to report this bug and helping to make Ubuntu better.

/lib/libnss_ldap.so.2 is no longer supposed to exist since we introduced multiarch (see https://wiki.ubuntu.com/MultiarchSpec). But /usr/lib/arm-linux-gnueabihf/libnss_ldap.so should exist, and this is a known bug (bug 1020152). Is this the issue you're facing? You can work around it by creating a symlink from /usr/lib/arm-linux-gnueabihf/libnss_ldap.so to /lib/arm-linux-gnueabihf/libnss_ldap.so.2.

If not, could you please describe in detail exactly what you're trying to do, and what exactly isn't working? Once done, please change the bug status back to New.

[Robie Basak (racb)]

(In other words, if something is looking for /lib/libnss_ldap.so.2, then that is what contains the bug, not this package. What is looking for /lib/libnss_ldap.so.2?)

[arronax23 (christian-goll)]

I stumbled accross the bug, when I tried to get ldap users via
getent passwd
which showed only the local users. A 'strace getent passwd' showed the missing libnss_ldap.so.2. As on x86 systems this library is part of libnss-ldap, I pressumed this bug is linked to it. getent itself is part of
libc-bin

[Robie Basak (racb)]

Please could you post the full strace output of an attempted "getent passwd"? But obfuscate any secrets, of course. Once done, please change the bug status back to New.

[Robie Basak (racb)]

(using an attachment would be advisable :)

[arronax23 (christian-goll)]

Hello Robin,
I have deleted now the soft link to from /usr/lib/arm-linux-gnueabihf/libnss_ldap.so to /lib/arm-linux-gnueabihf/libnss_ldap.so.2 and run a
strace getent passwd
The output is attached

[Robie Basak (racb)]

From the strace, it does attempt:

open("/usr/lib/arm-linux-gnueabihf/libnss_ldap.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
open("/lib/arm-linux-gnueabihf/libnss_ldap.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)

The file should be available in one of these two locations. But libnss-ldap only seems to provide libnss_ldap.so.1 at these locations on armhf, whereas on amd64 it provides libnss_ldap.so.2.

[Robie Basak (racb)]

I think this is fixed in sid, in http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683011

[Simon Eisenmann (longsleep)]

Well i hate to say it but his is still a problem.

Creating the following symbolic link fixed ldap nss on Ubuntu 14.04 (armhf):

  ln -s /lib/arm-linux-gnueabihf/nss_ldap.so /lib/arm-linux-gnueabihf/libnss_ldap.so.2

[Robie Basak (racb)]

Indeed Trusty shipped with 264-2.2ubuntu4, but the bug was fixed in Debian in 264-2.4, so Trusty isn't expected to have the fix. However Vivid has 265-3ubuntu2, so marking this Fix Released.

If you need a fix for Trusty, then an SRU may be possible here. But with such a simple workaround and few users affected, it's probably not worth it. If you disagree, please comment with a justification against https://wiki.ubuntu.com/StableReleaseUpdates#When and complete the steps at https://wiki.ubuntu.com/StableReleaseUpdates#Procedure. Note that that SRU team would need to make a final decision.