[Pkg-openldap-devel] Bug#381153: slapd: Upgrade to 2.3.24-2 breaks system when using libnss-ldap

[Paul LeoNerd Evans]

Package: slapd
Version: 2.3.24-2
Severity: critical
Justification: breaks the whole system

I have users stored in LDAP, using libnss-ldap and libpam-ldap. The
upgrade process to install 2.3.24-2 tries to stop slapd, then run
"useradd" to create the required user to run as, then start it again.
Because my user list is in LDAP, this all breaks. slapd is now
unstartable.

Furthermore, no user can log in to any terminal, nor can any existing
shells "su", or "sudo". PAM-ldap becomes unusable. Fortunately for me,
root is still in /etc/{passwd,shadow}, so I was able to ssh as root to
fix it.  Were that not the case, the only way out of this is a hard
reboot, passing

  init=/bin/sh

to GRUB/LILO, and manually fixing things from there.

I believe this total failure of ability to log in justifies the critical
classification, but I accept that it only happens in the non-default
case of passwd/group being LDAP-based.


-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.13-mh2.cel
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)

Versions of packages slapd depends on:
ii  adduser                 3.95             Add and remove users and groups
ii  coreutils               5.96-5           The GNU core utilities
ii  debconf [debconf-2.0]   1.5.2            Debian configuration management sy
ii  libc6                   2.3.6-15         GNU C Library: Shared libraries
ii  libdb4.2                4.2.52-23.1      Berkeley v4.2 Database Libraries [
ii  libiodbc2               3.52.4-3         iODBC Driver Manager
ii  libldap-2.3-0           2.3.24-2         OpenLDAP libraries
ii  libltdl3                1.5.22-4         A system independent dlopen wrappe
ii  libperl5.8              5.8.8-4          Shared Perl library
ii  libsasl2                2.1.19.dfsg1-0.2 Authentication abstraction library
ii  libslp1                 1.2.1-5          OpenSLP libraries
ii  libssl0.9.8             0.9.8b-2         SSL shared libraries
ii  libwrap0                7.6.dbs-9        Wietse Venema's TCP wrappers libra
ii  perl [libmime-base64-pe 5.8.8-4          Larry Wall's Practical Extraction 
ii  psmisc                  22.2-1           Utilities that use the proc filesy

Versions of packages slapd recommends:
ii  db4.2-util              4.2.52-23.1      Berkeley v4.2 Database Utilities
ii  libsasl2-modules        2.1.19.dfsg1-0.2 Pluggable Authentication Modules f

-- debconf information excluded