Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 125421
| Summary: | nscd not HUP'd on user/group operations | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Ville Skyttä <scop> |
| Component: | shadow-utils | Assignee: | Eido Inoue <havill> |
| Status: | CLOSED RAWHIDE | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | 2 | CC: | alan, anvil, mattdm, oliver |
| Target Milestone: | --- | Keywords: | EasyFix, Patch |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | 2:4.0.3-31 | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2004-10-12 20:01:06 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 123268, 125270 | ||
Ping? It is very important to get this fixed as all packages that create user accounts will be more or less broken at install time (bad file permissions) if nscd is running. *** Bug 123092 has been marked as a duplicate of this bug. *** Ping? Not only FC2 needs this fixed, but FC3 naturally as well (seems to be broken in rawhide too). Comments, please? Fix committed to CVS A FC2 erratum for this would be welcome... as IIRC suggested on fedora-devel, reopening and hereby poking the package maintainer :) (Adding myself to CC list) User accounts of this problem: http://www.redhat.com/archives/fedora-devel-list/2004-August/msg00613.html http://www.redhat.com/archives/fedora-list/2004-July/msg05437.html I suspect some people that have installed packages that add users while they have nscd running will have garbage in their /etc/passwd /etc/group as a result of this (I did). This is possibly worth noting in any errata notes. Alternatively, it can call nscd -i '<whatever>' to invalidate the proper cache. This bug is really awful. Now I know what caused the trouble when installing daemons on different servers. And I blamed the daemon RPMs for that! Regularly the user/group for the daemon is missing, resulting in not running server software. It's really stupid, look here: # groupadd -r test # useradd -r -g test test useradd: unknown group test Please relase an update, I disabled nscd for now. *** Bug 124831 has been marked as a duplicate of this bug. *** Will there be an update released? Thanks! Thanks for the FC2 update. It still happens for me: My versions: glibc-2.3.5-6 nscd-2.3.5-6 shadow-utils-4.0.7-7 Example: rpm -Uvh test-0.1-1.i386.rpm Preparing... ########################################### [100%] 1:test warning: group test does not exist - using root3%) ########################################### [100%] warning: group test does not exist - using root rpm -qp --scripts test-0.1-1.i386.rpm preinstall scriptlet (using /bin/sh): groupadd -r test >/dev/null 2>&1 postuninstall scriptlet (using /bin/sh): groupdel test >/dev/null 2>&1 Please also note, that another bug with the same problematic exists: bug #134323 Indeed, this issue seems to have resurfaced in FC4t3, but apparently the root cause is something else this time. Bug 134323 has more info. |
nscd is not properly HUP'd on user/group operations, resulting in obscure problems when creating/removing users while it's running. strace to the rescue: the nscd pid is looked from a wrong location, it lives nowadays in /var/run/nscd/nscd.pid, not /var/run/nscd.pid. This change to shadow-4.0.3-nscd.patch, around line 22, fixes it for me (but please review, I'm not a C programmer): + if ((pidfile=fopen("/var/run/nscd.pid","r")) != NULL) + { ...to: + if ((pidfile=fopen("/var/run/nscd/nscd.pid","r")) != NULL || + (pidfile=fopen("/var/run/nscd.pid","r")) != NULL) + { While at it: the libselinux-devel and gettext build dependencies are missing from shadow-utils.