From ajacoutot@lphp.org  Fri Mar 26 14:48:43 2004
Return-Path: <ajacoutot@lphp.org>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E72D116A4CE
	for <FreeBSD-gnats-submit@freebsd.org>; Fri, 26 Mar 2004 14:48:43 -0800 (PST)
Received: from mcp.lphp.org (APastourelles-107-1-13-107.w80-11.abo.wanadoo.fr [80.11.65.107])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A6B1043D1D
	for <FreeBSD-gnats-submit@freebsd.org>; Fri, 26 Mar 2004 14:48:42 -0800 (PST)
	(envelope-from ajacoutot@lphp.org)
Received: from bsdbox.lphp.local (bsdbox.lphp.local [192.168.0.2])
	by mcp.lphp.org (8.12.10/8.12.10) with ESMTP id i2QMmf7r006771
	for <FreeBSD-gnats-submit@freebsd.org>; Fri, 26 Mar 2004 23:48:41 +0100 (CET)
	(envelope-from ajacoutot@lphp.org)
Message-Id: <1080341321.0@bsdbox.lphp.local>
Date: Fri, 26 Mar 2004 23:48:41 +0100
From: "Antoine Jacoutot" <ajacoutot@lphp.org>
To: "FreeBSD gnats submit" <FreeBSD-gnats-submit@freebsd.org>
Subject: nsswitch with ldap and starting ppp on boot gives errors
X-Send-Pr-Version: gtk-send-pr 0.3.3 
X-GNATS-Notify:

>Number:         64788
>Category:       conf
>Synopsis:       [nsswitch.conf] nsswitch with ldap and starting ppp on boot gives errors
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Mar 26 14:50:20 PST 2004
>Closed-Date:    
>Last-Modified:  Thu Jun 05 09:45:39 UTC 2008
>Originator:     Antoine Jacoutot
>Release:        FreeBSD 5.2.1-RELEASE-p3 i386
>Organization:
NONE 
>Environment:


System: FreeBSD 5.2.1-RELEASE-p3 #0: Thu Mar 18 16:40:16 CET 2004
    root@bsdbox.lphp.local:/usr/obj/usr/src/sys/BSDBOX



>Description:


When using ldap as an authentication mechanism (pam_ldap) and nss_ldap for user info, starting ppp automatically on boot gives the following error:
kernel su: NSSWITCH(nss_method_lookup): ldap, group, setgrent, not found
kernel su: NSSWITCH(nss_method_lookup): ldap, group, getgrent_r, not found
kernel su: NSSWITCH(nss_method_lookup): ldap, group, endgrent, not found

This is due to the fact that /etc/rc.d/ppp-user launches the following command:
su -m ${ppp_user} -c "exec ${ppp_command}"

And at this time, the ldap server is not started yet which means nsswitch cannot access it (for "su" infos).
Note that it does not avoid the connexion to be established (if ppp-user is root), so this might be more a cosmetic fix than a real problem, but I still it should be fixed though.


>How-To-Repeat:


Install and configure pam_ldap and nss_ldap for authentication and start ppp on boot (in rc.conf).


>Fix:


Make sure the ldap server (slapd) is started BEFORE ppp.


>Release-Note:
>Audit-Trail:
>Unformatted:
