Bug 334777

Summary: glibc nscd
Product: [openSUSE] openSUSE 10.2 Reporter: Alexander Soellner <support>
Component: Update ProblemsAssignee: Petr Baudis <pbaudis>
Status: RESOLVED FIXED QA Contact: Jiri Srain <jsrain>
Severity: Blocker    
Priority: P5 - None CC: coolo, cyberbeat, forgotten_tn5Rr5KF6I, hpj, matz, michael.dreher, ralf, suse-beta
Version: Final   
Target Milestone: ---   
Hardware: 64bit   
OS: openSUSE 10.2   
Whiteboard:
Found By: Customer Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---
Attachments: nscd.conf
id user nonscd
id user nscd running
su - user nonscd
su - user nscd-running
nsswitch.conf
/etc/ldap.conf
strace id <user> glibc-2.5-34.6 nonscd

Description Alexander Soellner 2007-10-18 09:31:32 UTC
After updating glibc-2.5-25 to glibc-2.5-34.5 User Login is disabled.
With getent passwd, I get back the userlist, but id user or su - user doesn´t work and login is disabled.

We use for login an openldap server.
Bevore Update login was just able with deaktivating nscd.

bevore-update:
# rpm -ql glibc | xargs md5sum
db84c47f31f8d5a334a4053d8368e902  /etc/bindresvport.blacklist
7833e41d2e3b0e43a2a95e253c866702  /etc/default/nss
c2aa2e85a602c1739aeaac73e7ebb2f8  /etc/ld.so.cache
e849017db18f96ba2f5b7bad26a98af7  /etc/ld.so.conf
6c8734cf3920cae1ed3796788d881d53  /etc/nsswitch.conf
829918f13dcb14fdeab47541ff658cfa  /etc/rpc
91f52720f2010ae444654a66c77e2b8a  /lib/ld-2.5.so
91f52720f2010ae444654a66c77e2b8a  /lib/ld-linux.so.2
28bc197aa2881b71a00ff1249a31ed9f  /lib/libBrokenLocale-2.5.so
28bc197aa2881b71a00ff1249a31ed9f  /lib/libBrokenLocale.so.1
b30d4d0469793925a27f0d136345c7da  /lib/libSegFault.so
e85be281572498b8d45f0213deda71f4  /lib/libanl-2.5.so
e85be281572498b8d45f0213deda71f4  /lib/libanl.so.1
63adbb3559058f11f135e939c6fbe6db  /lib/libc-2.5.so
63adbb3559058f11f135e939c6fbe6db  /lib/libc.so.6
f23312400563e13a833fe35618db2402  /lib/libcidn-2.5.so
f23312400563e13a833fe35618db2402  /lib/libcidn.so.1
084479d32fa6184fbd1abb8fc28288e8  /lib/libcrypt-2.5.so
084479d32fa6184fbd1abb8fc28288e8  /lib/libcrypt.so.1
535327ae354fbd933f6159645daa4ad1  /lib/libdl-2.5.so
535327ae354fbd933f6159645daa4ad1  /lib/libdl.so.2
d580881b6fcc9c734f7332f7012f3b6e  /lib/libm-2.5.so
d580881b6fcc9c734f7332f7012f3b6e  /lib/libm.so.6
d262fff99ffbb897db541407d7e6a7d9  /lib/libmemusage.so
cba753ef822f83526a96ac5adcc84323  /lib/libnsl-2.5.so
cba753ef822f83526a96ac5adcc84323  /lib/libnsl.so.1
6958029129bdfe31f1d10370ce6ea726  /lib/libnss_compat-2.5.so
6958029129bdfe31f1d10370ce6ea726  /lib/libnss_compat.so.2
b5d8ce68a7b9f7e7e36da916a88e2668  /lib/libnss_dns-2.5.so
b5d8ce68a7b9f7e7e36da916a88e2668  /lib/libnss_dns.so.2
0f6d761bf37a3310cfa50b7c5f9f7380  /lib/libnss_files-2.5.so
0f6d761bf37a3310cfa50b7c5f9f7380  /lib/libnss_files.so.2
a7ec0bac53289acb478bafd940ba9ab4  /lib/libnss_hesiod-2.5.so
a7ec0bac53289acb478bafd940ba9ab4  /lib/libnss_hesiod.so.2
a7f23a051f608dc7e241addf8c362caa  /lib/libnss_nis-2.5.so
a7f23a051f608dc7e241addf8c362caa  /lib/libnss_nis.so.2
3a8d5feac63ba6b51bc6e4fc4283e7fc  /lib/libnss_nisplus-2.5.so
3a8d5feac63ba6b51bc6e4fc4283e7fc  /lib/libnss_nisplus.so.2
46806feb8f6d1290b78d3fcc361ca7e8  /lib/libpcprofile.so
bcc8c1075c1dc7fd80c2a2a3eb1019f0  /lib/libpthread-2.5.so
bcc8c1075c1dc7fd80c2a2a3eb1019f0  /lib/libpthread.so.0
07f688a7b1c81f59c13d7a01a5ed8bf0  /lib/libresolv-2.5.so
07f688a7b1c81f59c13d7a01a5ed8bf0  /lib/libresolv.so.2
f0357e0cf069efeb68c2f0ce61f1be47  /lib/librt-2.5.so
f0357e0cf069efeb68c2f0ce61f1be47  /lib/librt.so.1
e4201b7a57619e4227c6bbebda7b4adb  /lib/libthread_db-1.0.so
e4201b7a57619e4227c6bbebda7b4adb  /lib/libthread_db.so.1
31b2f9ad6fda4cb5718f257af425dc09  /lib/libutil-2.5.so
31b2f9ad6fda4cb5718f257af425dc09  /lib/libutil.so.1
18ffbba260895d9fad46a85b3b6dd967  /sbin/ldconfig
97896f2dfd2911f79889413a068c2a9a  /usr/bin/gencat
2d26faa6f9479454c56aa8d1bd8c373b  /usr/bin/getconf
fd528558a66adc3a36f716a7d40f7996  /usr/bin/getent
100726df7ab81f02eed86667d328ce3a  /usr/bin/iconv
690703166113ae9e73bed53463399bd7  /usr/bin/ldd
89363a31dad9ba708bd1e5c52de4b342  /usr/bin/lddlibc4
8ae809c1606038ade949e668cda305e6  /usr/bin/locale
9f544186b120f3c4d46e17f75b049181  /usr/bin/localedef
md5sum: /usr/lib/getconf: Ist ein Verzeichnis
1aa9caf351e817040a719606ff419818  /usr/lib/getconf/POSIX_V6_ILP32_OFF32
fddb80a42ec6bdab7b486545ead65fd1  /usr/lib/getconf/POSIX_V6_ILP32_OFFBIG
cd312fe0493545eb593998e4a1745c87  /usr/lib/pt_chown
badd6d3275745c183d31d7f5df44f556  /usr/sbin/glibc_post_upgrade
e2fbc674586b2d16e32af7117345528f  /usr/sbin/iconvconfig
6f1391e0470e333d90a18323fc475782  /usr/sbin/rpcinfo
md5sum: /usr/share/doc/packages/glibc: Ist ein Verzeichnis
07a394b26e0902b9ffdec03765209770  /usr/share/doc/packages/glibc/LICENSES
0c227de383085640f3fd0803f9ab4ec4  /usr/share/man/man1/getconf.1.gz
a42ac1e8cf9fc23f0856c39ba0b704c4  /usr/share/man/man1/getent.1.gz
4914d4604ac4741acb9f065e3a22d731  /usr/share/man/man1/localedef.1.gz
0c208f20872e519eb63839e643a5adc1  /usr/share/man/man5/locale.alias.5.gz
d67e50d1e61a8f035c063e382ea04f87  /usr/share/man/man8/rpcinfo.8.gz

after-update:
# rpm -ql glibc | xargs md5sum
db84c47f31f8d5a334a4053d8368e902  /etc/bindresvport.blacklist
7833e41d2e3b0e43a2a95e253c866702  /etc/default/nss
3a2b6bf1335f2ec437b14b229fc2105c  /etc/ld.so.cache
e849017db18f96ba2f5b7bad26a98af7  /etc/ld.so.conf
6c8734cf3920cae1ed3796788d881d53  /etc/nsswitch.conf
829918f13dcb14fdeab47541ff658cfa  /etc/rpc
91f52720f2010ae444654a66c77e2b8a  /lib/ld-2.5.so
91f52720f2010ae444654a66c77e2b8a  /lib/ld-linux.so.2
28bc197aa2881b71a00ff1249a31ed9f  /lib/libBrokenLocale-2.5.so
28bc197aa2881b71a00ff1249a31ed9f  /lib/libBrokenLocale.so.1
b30d4d0469793925a27f0d136345c7da  /lib/libSegFault.so
e85be281572498b8d45f0213deda71f4  /lib/libanl-2.5.so
e85be281572498b8d45f0213deda71f4  /lib/libanl.so.1
34dedc7e27600c7abb61675b69a265c9  /lib/libc-2.5.so
34dedc7e27600c7abb61675b69a265c9  /lib/libc.so.6
f23312400563e13a833fe35618db2402  /lib/libcidn-2.5.so
f23312400563e13a833fe35618db2402  /lib/libcidn.so.1
6fddc75dbf02713265e04a98068b9ef6  /lib/libcrypt-2.5.so
6fddc75dbf02713265e04a98068b9ef6  /lib/libcrypt.so.1
535327ae354fbd933f6159645daa4ad1  /lib/libdl-2.5.so
535327ae354fbd933f6159645daa4ad1  /lib/libdl.so.2
d580881b6fcc9c734f7332f7012f3b6e  /lib/libm-2.5.so
d580881b6fcc9c734f7332f7012f3b6e  /lib/libm.so.6
d262fff99ffbb897db541407d7e6a7d9  /lib/libmemusage.so
cba753ef822f83526a96ac5adcc84323  /lib/libnsl-2.5.so
cba753ef822f83526a96ac5adcc84323  /lib/libnsl.so.1
6958029129bdfe31f1d10370ce6ea726  /lib/libnss_compat-2.5.so
6958029129bdfe31f1d10370ce6ea726  /lib/libnss_compat.so.2
b5d8ce68a7b9f7e7e36da916a88e2668  /lib/libnss_dns-2.5.so
b5d8ce68a7b9f7e7e36da916a88e2668  /lib/libnss_dns.so.2
0f6d761bf37a3310cfa50b7c5f9f7380  /lib/libnss_files-2.5.so
0f6d761bf37a3310cfa50b7c5f9f7380  /lib/libnss_files.so.2
a7ec0bac53289acb478bafd940ba9ab4  /lib/libnss_hesiod-2.5.so
a7ec0bac53289acb478bafd940ba9ab4  /lib/libnss_hesiod.so.2
a7f23a051f608dc7e241addf8c362caa  /lib/libnss_nis-2.5.so
a7f23a051f608dc7e241addf8c362caa  /lib/libnss_nis.so.2
3a8d5feac63ba6b51bc6e4fc4283e7fc  /lib/libnss_nisplus-2.5.so
3a8d5feac63ba6b51bc6e4fc4283e7fc  /lib/libnss_nisplus.so.2
46806feb8f6d1290b78d3fcc361ca7e8  /lib/libpcprofile.so
bcc8c1075c1dc7fd80c2a2a3eb1019f0  /lib/libpthread-2.5.so
bcc8c1075c1dc7fd80c2a2a3eb1019f0  /lib/libpthread.so.0
fc1dd76c4d3e98e53d1e07bde18acc0b  /lib/libresolv-2.5.so
fc1dd76c4d3e98e53d1e07bde18acc0b  /lib/libresolv.so.2
f0357e0cf069efeb68c2f0ce61f1be47  /lib/librt-2.5.so
f0357e0cf069efeb68c2f0ce61f1be47  /lib/librt.so.1
e4201b7a57619e4227c6bbebda7b4adb  /lib/libthread_db-1.0.so
e4201b7a57619e4227c6bbebda7b4adb  /lib/libthread_db.so.1
9cc79d9bc67bc611a467fca26346406d  /lib/libutil-2.5.so
9cc79d9bc67bc611a467fca26346406d  /lib/libutil.so.1
a1a3032c287c7caed5246e17ba88cf03  /sbin/ldconfig
97896f2dfd2911f79889413a068c2a9a  /usr/bin/gencat
2d26faa6f9479454c56aa8d1bd8c373b  /usr/bin/getconf
fd528558a66adc3a36f716a7d40f7996  /usr/bin/getent
100726df7ab81f02eed86667d328ce3a  /usr/bin/iconv
690703166113ae9e73bed53463399bd7  /usr/bin/ldd
89363a31dad9ba708bd1e5c52de4b342  /usr/bin/lddlibc4
8ae809c1606038ade949e668cda305e6  /usr/bin/locale
9f544186b120f3c4d46e17f75b049181  /usr/bin/localedef
md5sum: /usr/lib/getconf: Ist ein Verzeichnis
1aa9caf351e817040a719606ff419818  /usr/lib/getconf/POSIX_V6_ILP32_OFF32
fddb80a42ec6bdab7b486545ead65fd1  /usr/lib/getconf/POSIX_V6_ILP32_OFFBIG
cd312fe0493545eb593998e4a1745c87  /usr/lib/pt_chown
c647df97cf37394a47d803e91583e252  /usr/sbin/glibc_post_upgrade
e2fbc674586b2d16e32af7117345528f  /usr/sbin/iconvconfig
6f1391e0470e333d90a18323fc475782  /usr/sbin/rpcinfo
md5sum: /usr/share/doc/packages/glibc: Ist ein Verzeichnis
07a394b26e0902b9ffdec03765209770  /usr/share/doc/packages/glibc/LICENSES
0c227de383085640f3fd0803f9ab4ec4  /usr/share/man/man1/getconf.1.gz
a42ac1e8cf9fc23f0856c39ba0b704c4  /usr/share/man/man1/getent.1.gz
4914d4604ac4741acb9f065e3a22d731  /usr/share/man/man1/localedef.1.gz
0c208f20872e519eb63839e643a5adc1  /usr/share/man/man5/locale.alias.5.gz
d67e50d1e61a8f035c063e382ea04f87  /usr/share/man/man8/rpcinfo.8.gz
Comment 1 Michael Matz 2007-10-18 09:49:58 UTC
Hmm, openldap login server.  There were also changes in nss_ldap,
which probably also needs to be updated?  Assigning to Petr, and CCing
Ralf.
Comment 3 Petr Baudis 2007-10-18 09:58:32 UTC
Can you please elaborate "doesn't work"? Does it hang for you? Always return permission denied? Can you attach strace output? Try to attach gdb if it hangs? Also please attach your /etc/nscd.conf, try to set debug-level 10 in your /etc/nscd.conf, restart nscd and attach nscd logs after trying su.
Comment 4 Petr Baudis 2007-10-18 10:10:22 UTC
Also, it would be awesome if you could try downgrading either nss_ldap or nscd and see if the problem persists.
Comment 6 Alexander Soellner 2007-10-18 11:20:59 UTC
Created attachment 179199 [details]
nscd.conf
Comment 7 Alexander Soellner 2007-10-18 11:21:57 UTC
Created attachment 179200 [details]
id user nonscd
Comment 8 Alexander Soellner 2007-10-18 11:22:33 UTC
Created attachment 179201 [details]
id user nscd running
Comment 9 Alexander Soellner 2007-10-18 11:23:10 UTC
Created attachment 179202 [details]
su - user nonscd
Comment 10 Alexander Soellner 2007-10-18 11:23:42 UTC
Created attachment 179203 [details]
su - user nscd-running
Comment 11 Alexander Soellner 2007-10-18 11:26:42 UTC
(In reply to comment #1 from Michael Matz)
> Hmm, openldap login server.  There were also changes in nss_ldap,
> which probably also needs to be updated?  Assigning to Petr, and CCing
> Ralf.
> 
There where no actual nss_ldap updates

(In reply to comment #3 from Petr Baudis)
> Can you please elaborate "doesn't work"? Does it hang for you? Always return
> permission denied? Can you attach strace output? Try to attach gdb if it hangs?
> Also please attach your /etc/nscd.conf, try to set debug-level 10 in your
> /etc/nscd.conf, restart nscd and attach nscd logs after trying su.
> 
su - user or id user hangs, I end it whith Ctrl-C, if nscd is not running. If nscd is running su - user returns: No such user.

There is no logging from nscd.
Comment 12 Ralf Haferkamp 2007-10-18 11:43:26 UTC
Please also attach /etc/nsswitch.conf and /etc/ldap.conf. Did nss_ldap log anything to /var/log/messages?
Comment 13 Alexander Soellner 2007-10-18 11:54:05 UTC
(In reply to comment #4 from Petr Baudis)
> Also, it would be awesome if you could try downgrading either nss_ldap or nscd
> and see if the problem persists.
> 

# rpm -qa | grep nss_ldap
nss_ldap-253-19.1
downgrade
# rpm -qa | grep nss_ldap
nss_ldap-253-14

the problem still persists.

Just downgrading glibc to glibc-2.5-25 works.
Comment 14 Alexander Soellner 2007-10-18 12:05:58 UTC
Created attachment 179216 [details]
nsswitch.conf
Comment 15 Alexander Soellner 2007-10-18 12:06:22 UTC
Created attachment 179217 [details]
/etc/ldap.conf
Comment 17 Petr Baudis 2007-10-18 13:29:36 UTC
*** Bug 334572 has been marked as a duplicate of this bug. ***
Comment 18 Petr Baudis 2007-10-19 20:03:26 UTC
Can you please test with glibc from http://www.suse.de/~pbaudis/bug-334777/ ?
Comment 19 Forgotten User tn5Rr5KF6I 2007-10-24 10:45:51 UTC
Created attachment 180192 [details]
strace id <user> glibc-2.5-34.6 nonscd
Comment 20 Forgotten User tn5Rr5KF6I 2007-10-24 10:47:37 UTC
I am running into the same problem. Here are the symptoms: id '<user>' and 'su'  (from <user> to root) don't work. 'login' can't tested because the computer is accessed with ssh (which works).

I tested glibc from http://www.suse.de/~pbaudis/bug-334777/ but the problem persists.

I attach the output from 'strace id akoenecke' with the new glibc and with nscd disabled.

(BTW: The 32-bit-Version is affected, too.)
Comment 21 Petr Baudis 2007-10-29 04:15:26 UTC
*** Bug 337395 has been marked as a duplicate of this bug. ***
Comment 22 Petr Baudis 2007-10-29 14:52:31 UTC
I hope http://www.suse.de/~pbaudis/bug-334777c/10.2-x86_64/ fixes it - can you confirm, please?
Comment 23 Forgotten User tn5Rr5KF6I 2007-10-29 16:12:52 UTC
Yes, 'id <user>' and 'su' now work again.

Comment 24 Petr Baudis 2007-10-30 16:16:58 UTC
In that case I think we should release new 10.2 glibc with the locale patch disabled again (and keep this bug open because glibc-2.7 will soon go to factory and we need to check if this bug happens there as well), bug 329650 isn't worth the trouble.

NEEDINFO on Anja for swampid.
Comment 30 Christian Boltz 2007-11-10 01:20:13 UTC
Can you provide a short status update on this bug, please?

a)
When can "official" fixed packages be expected?

b)
Can I install the packages from comment #22 without risking to break anything?
In other words: are these packages less broken than what is available via YOU? Is there a risk that they introduce new bugs?
(At the moment web statistics are broken on my server, which is "only" annoying. But breaking more stuff is not what I want on a public server ;-)

If you think the packages are OK: Do I need to update the nscd and timezone packages also?
Comment 32 Hans-Peter Jansen 2007-11-14 15:31:29 UTC
Chiming in, because of suffering from the same symptoms. Apart from what is already said, let me add, that it happens on i386 arch (with bigsmp kernel)
here, and it doesn't happen all the time (I rebooted 8 times yesterday, and the only the last one was ok). The only thing I changed in between 7th and 8th reboot was reconfiguring my sound card, which wasn't started properly before, although rcalsasound status said running. Funny enough, running rcalsasound restart before logging into kde fixed it temporarily. Removing and readding the "MCP55 HDA" seems to fixed it persistently. Could be related, could very well be unrelated, but int never happened before:

Here's the boot.log diff:
-<3>ALSA sound/core/init.c:134: cannot find the slot for index 0 (range 0-0)
-<3>ALSA sound/pci/hda/hda_intel.c:1584: hda-intel: Error creating card!
-<4>HDA Intel: probe of 0000:00:0e.1 failed with error -12
+<6>hda_codec: Unknown model for AD1988, trying auto-probe from BIOS...
+<7>ALSA sound/pci/hda/hda_codec.c:2117: autoconfig: line_outs=4 (0x12/0x25/0x24/0x16/0x0)
+<7>ALSA sound/pci/hda/hda_codec.c:2121:    speaker_outs=0 (0x0/0x0/0x0/0x0/0x0)
+<7>ALSA sound/pci/hda/hda_codec.c:2123:    hp=0x11, dig_out=0x1b, din_in=0x0
+<7>ALSA sound/pci/hda/hda_codec.c:2131:    inputs: mic=0x17, fmic=0x14, line=0x15, fline=0x0, cd=0x18, aux=0x0

In all the bad cases, trying to edit something with vim in any graphical console (konsole, xterm) triggered the hang in futex wait, while vim on the text console was fine. If it happened one time, the typical nss_ldap users like su hang, as does login as (openldap auth'ed) user on text console, while login as (local auth'ed) root succeeded.

Comment 33 Hans-Peter Jansen 2007-11-19 13:42:56 UTC
Okay, would you leave a message here, when this issue is sorted out, please.

I've downgraded glibc on my 10.2 systems and need to remove the exclusion manually then.

TIA, Pete
Comment 34 Petr Baudis 2007-11-21 02:24:30 UTC
Package update and patchinfo has been submitted, this should get released in few days.
Comment 35 Anja Stock 2007-11-23 14:44:52 UTC
released
Comment 36 Dirk Mueller 2007-11-23 21:07:42 UTC
*** Bug 338442 has been marked as a duplicate of this bug. ***