package nslcd 0.8.4ubuntu0.2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

[Darren Lichty]

Not sure why this came up, as nslcd is already installed and running. It might be that this is the first restart since the installation and setup. I do recall some error messages showing up during the install, but things appear to be working fine.

ProblemType: Package
DistroRelease: Ubuntu 12.04
Package: nslcd 0.8.4ubuntu0.2
ProcVersionSignature: Ubuntu 3.11.0-18.32~precise1-generic 3.11.10.4
Uname: Linux 3.11.0-18-generic x86_64
ApportVersion: 2.0.1-0ubuntu17.6
Architecture: amd64
Date: Tue Mar 18 15:32:32 2014
DuplicateSignature: package:nslcd:0.8.4ubuntu0.2:subprocess installed post-installation script returned error exit status 1
ErrorMessage: subprocess installed post-installation script returned error exit status 1
InstallationMedia: Ubuntu 12.04.4 LTS "Precise Pangolin" - Release amd64 (20140204)
MarkForUpload: True
SourcePackage: nss-pam-ldapd
Title: package nslcd 0.8.4ubuntu0.2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1
UpgradeStatus: No upgrade log present (probably fresh install)

[Arthur de Jong (adejong)]

The dpkg log shows the installation of nslcd (was uninstalled before). The relevant part shows that adduser failed:

Adding new user `nslcd' (UID 116) with group `nslcd' ...
adduser: `/usr/bin/chfn -f nslcd name service LDAP connection daemon nslcd' exited from signal 139. Exiting.
dpkg: error processing nslcd (--configure):
 subprocess installed post-installation script returned error exit status 1

The kernel log shows:

[11508.391940] chfn[10880]: segfault at 10 ip 00007f090734df90 sp 00007fffe7854230 error 4 in pam_krb5.so[7f0907348000+c000]

Which seens to point to a bug in pam_krb5 or one of it's libraries.

While you could use pam_krb5 and pam_ldap together, it is probably not what you want.

[Darren Lichty (delichty)]

Thanks for the response Arthur!

The user did already exist prior to this install. When I cleared things out and uninstalled the previous package, I neglected to remove the old user.

I am using krb5+ldap in my authentication scheme intentionally. While LDAP holds the account details, SSL is not currently supported on the server side (which I have no control over). So instead of sending passwords in the clear, I use Kerberos to authenticate the user, and use LDAP to pull the account details (UID, GID, Groups, etc.).

I am also looking at using SSSD to accomplish this task.

Thanks!

[Arthur de Jong (adejong)]

In this configuration you probably need libnss-ldapd for the account information and libpam-krb5 for Kerberos. You don't need libpam-ldapd. This should also be doable with SSSD.

Anway, I don't think there is enough information in the bug report to investigate further.