Jeffrey D Anderson wrote:
> On Sunday 25 May 2008 1:21:41 am Jan Iven wrote:
>> On 05/23/2008 07:07 PM, Jeffrey D Anderson wrote:
>> [..]
>>
>>> The "pam_console_apply" signal 13 (broken pipe) is obviously at the core
>>> of the bug, but I don't know enough about pam to really understand what
>>> is going wrong.
>> I would suggest to  set up a test:
>> # strace -s 256 -f -o /tmp/somefile -p <PID_OF_GETTY_ON_CONSOLE>"
>>
>> If you are running nscd, suggest to "strace" this as well.
>>
>> Then repeat your login test, and search the tracefile(s) for signal 13,
>> identify which process held the other end of the pipe, and why it went
>> away - most likely some subprocess died/segfaulted without leaving other
>> traces in the logs.
>>
>> Hope this helps
>> jan
> 
> Thanks for the suggestion.  I ran the strace with both the new, problematic 
> nss_ldap, and the old version that works.  I find three places where broken 
> pipes result.
> 
> Since this is obviously not an SL specific issue, I'm moving my debugging off 
> the list.
> 
> It looks like this is already reported as 
> https://bugzilla.redhat.com/show_bug.cgi?id=447881
> No solution yet, though.
> 

We have a similar problem on systems runnig SL5.1 after the update to 
nss_ldap-253-12.el5.i386.

If nscd is not running we have:
- dbus (messagebus service) fails to start and so also hal
- tcsh reports 'broken pipe' for any command issued
- 'su - <user>' doesn't work
- login from console fails because of the shell.

If ncsd is running:
- dbus still fails to start (because the service starts at "22", before 
ncsd (it starts at "30")) while all other problems seem to disappear.

We have investigated for a while and the problems are reproducible with:
- system just installed,
- ldap configurated with SSL support
- ncsd stopped
everythings works,
- yum update nss_ldap -> breaks ldap as described
- start ncsd -> fixes the problems as described

I don't think this problem is that already reported as 
https://bugzilla.redhat.com/show_bug.cgi?id=447881
Sorry if it is not an SL specific issue and hope this can help someone else.

thanks,

Matteo

-- 
________________________________________________________________________
Dott. Matteo |  Dip. Fisica - Universita` di Padova  | Ph. +390498277248
Menguzzato   | Via Marzolo, 8 - 35131 Padova - ITALY | Fax +390498277102
------------------------------------------------------------------------