LDAP support broken in rpc.idmapd

Bug #1088154 reported by Ashish SHUKLA
16
This bug affects 3 people
Affects Status Importance Assigned to Milestone
nfs-utils (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

Hi,

I'm trying to use LDAP support in rpc.idmapd, and I get following errors:

% tail -6 /var/log/daemon.log
Dec 9 10:18:53 bk0-srv rpc.idmapd[24360]: libnfsidmap: using domain: domain.tld
Dec 9 10:18:53 bk0-srv rpc.idmapd[24360]: libnfsidmap: Realms list: 'DOMAIN.TLD'
Dec 9 10:18:53 bk0-srv rpc.idmapd[24360]: libnfsidmap: processing 'Method' list
Dec 9 10:18:53 bk0-srv rpc.idmapd[24360]: umichldap_init: Missing required information: LDAP_server LDAP_base
Dec 9 10:18:53 bk0-srv rpc.idmapd[24360]: libnfsidmap: Failed in /lib/libnfsidmap/umich_ldap.so's init(), returned -1
Dec 9 10:18:53 bk0-srv rpc.idmapd[24360]: libnfsidmap: requested translation method, 'umich_ldap', is not available

Following is idmapd.conf(5):

% cat /etc/idmapd.conf
[General]

Verbosity = 10
Pipefs-Directory = /run/rpc_pipefs
Domain = domain.tld
# set your own domain here, if id differs from FQDN minus hostname
# Domain = localdomain

[Translation]

Method = umich_ldap, nsswitch

[UMICH_SCHEMA]

LDAP_server = ldap.domain.tld
LDAP_base = dc=domain,dc=tld

[Mapping]

Nobody-User = nobody
Nobody-Group = nogroup

I'm not sure why rpc.idmapd complains about lack of LDAP_server, LDAP_base keys when they're present in the corresponding section ("UMICH_SCHEMA")

Thanks in advance

Tags: ldap
Ashish SHUKLA (wahjava)
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in libnfsidmap (Ubuntu):
status: New → Confirmed
Revision history for this message
Ashish SHUKLA (wahjava) wrote :

Seems to be fault of nfs-utils, and not libnfsidmap2. Details in next-update.

affects: libnfsidmap (Ubuntu) → nfs-utils (Ubuntu)
Revision history for this message
Ashish SHUKLA (wahjava) wrote :

I'm able to triage this bug, and it seems like the culprit is `conf_*` functions present in conffile.c (nfs-utils), which are also present in cfg.c (libnfsidmap2), and due to runtime linking, `conf_*` present in `rpc.idmapd` executable (nfs-utils) takes precedence over the `conf_*` functions present in `/lib/libnfsidmap.so.0` due to symbol search order, and therefore complicating configuration parsing.

The diff attached marks the `conf_*` functions, present in `conffile.c` which seem to conflict with functions present in `cfg.c`, as `static`, and therefore fixing the conflict.

For the record, I'm running `Ubuntu Precise`.

Thanks

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.