libnss-ldap causes boot hang on 12.04 precise, 14.04 trusty, 16.04 xenial
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
libnss-ldap (Ubuntu) |
Confirmed
|
High
|
Unassigned |
Bug Description
A configuration that works perfectly after setup prevents an Ubuntu 12.04 Precise client from booting.
Checks before rebooting:
1. winbind authentication is working (console login, xrdp, etc)
2. libnss-ldap name resolution is working (getent passwd)
(this is the intended setup)
After booting the default Grub option we see the machine hung without printing anything.
Booting in recovery mode allows us to see that the last printed message is:
Begin: Running /scrips/init-bottom ... done.
The problem IS related to libnss-ldap because if we boot via cdrom and change nsswitch.conf to use local authentication the machine boots again perfectly. We can then change it back to use local authentication + ldap (compat ldap) and verify that it works. However the system won't come up after rebooting.
Even though the nss_initgroups_
Configuration details:
/etc/ldap.conf
-------
base dc=DOMAIN,dc=COM
binddn uid=ldapuser,
bindpw XXXXXYYYYZZZZ
ldap_version 3
uri ldap://192.168.1.8
nss_initgroups_
/etc/nsswitch.conf
-------
passwd: compat ldap
group: compat ldap
shadow: compat ldap
hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4 wins
networks: files
protocols: db files
services: db files
ethers: db files
rpc: db files
netgroup: nis
extra options tried on /etc/ldap.conf
-------
timelimit 2
bind_timelimit 1
nss_reconnect_
nss_reconnect_
bind_policy soft
Related branches
summary: |
- libnss-ldap causes boot hang on Ubuntu 12.04 Precise + libnss-ldap causes boot hang on 12.04 precise, 14.04 trusty |
tags: | added: precise trusty |
tags: | added: xenial |
Further debug indicates that this is a group resolution problem at boot time because
passwd: compat ldap
group: compat
shadow: compat ldap
boots perfectly.