« Return to Thread: Segmentation Faults for Ldap Accounts

Debug Level

by Jim Summers :: Rate this Message:

Reply to Author | View in Thread

Is there any way to increase the debug level in nss_ldap or pam_ldap so
that I can get more info on what may be going on?

Thanks

Jim Summers wrote:

>
>
> Buchan Milne wrote:
>> On Thu, 2008-04-10 at 08:55 -0500, Jim Summers wrote:
>>> Hello All,
>>>
>>> I have encountered a problem that I think is related to nss_ldap or
>>> pam_ldap.
>>>
>>> I am using a fedora directory server for my authentication.  It is
>>> authenticating for RHEL4 and 5 and Fedora 5,6,8 clients.
>>>
>>> Everything is functioning as expected on all clients except for
>>> Fedora 8 clients.  The problem is related to two programs that my
>>> users run, vmplayer and brightq printing system from codehost.com for
>>> canon printers.
>>>
>>> On a Fedora 8 client anytime a user from the ldap attempts to run
>>> vmplayer I start seeing entries in /var/log/messages about it trying
>>> to pull something from the ldap or passwd and it loops until it is
>>> killed.   The brightq software simply segfaults.  Using strace it
>>> appears to trying to resolve gid or uid numbers.  Local accounts can
>>> run either program with no problem.
>>>
>>> On any of the older clients there is not any problems with either
>>> program for ldap users.
>>>
>>> So I feel that something new is in place for Fedora 8 and I have
>>> overlooked what I need to configure or account for.  Selinux is
>>> turned off on all of the clients.
>>>
>>> Ideas/Suggestions?
>>
>>
>> Is the client that exhibits this problem an x86_64 machine, running an
>> x86_64 OS ? Are all the problems experienced by 32-bit applications? If
>> so, you probably need to check if you have a 32bit nss_ldap
>> installed ...
> Many Thanks.
>
> The brightq software is 32bit and the machines I am testing it on are
> also 32bit.  I am a little stumped as to the problem.  I was going
> through the access log on the directory server and it seems that the
> Fedora 8 is doing a whole lot of queries with the uidNumber.  Whereas
> the FC6 machine I was looking at seem to do more with the uid.  I wonder
> if there is something there that is causing some confusion like trying
> to find a memberuid that is numeric or something from the group container.
>
> I also have some 64bit machines that definitely have the vmplayer
> problem.  I checked those and yum says that nss_ldap.i386 and
> nss_ldap.x86_64 are installed.  Is there possibly some compatibility
> packeages that are necessary?
>
> I am stumped at this point, the OS commands like "id" all work fine,
> authentication and stuff is fine.
>
> Ideas / Suggestions?
>
> Thanks again!
>
>
>>
>>
>> Regards,
>> Buchan
>

--
Jim Summers
Computer Science - University of Oklahoma

 « Return to Thread: Segmentation Faults for Ldap Accounts

LightInTheBox - Buy quality products at wholesale price