Package: libnss-ldapd
Version: 0.9.12-3
Severity: normal

Dear Maintainer,

The search for enabled services in /etc/nsswitch.conf breaks when using the 
Swedish locale.

In the debconf ".config" script we have the nss_list_configured() function. 
Compare the output in the "C" and the Swedish locale:

LANG=C sed -n 
's/^[[:space:]]*\([a-z]*\)[[:space:]]*:.*[[:space:]]ldap\([[:space:]].*\)\?/\1/p'
 /etc/nsswitch.conf | xargs

gives 

passwd group shadow

which is correct, whereas

LANG=sv_SE.UTF-8 sed -n 
's/^[[:space:]]*\([a-z]*\)[[:space:]]*:.*[[:space:]]ldap\([[:space:]].*\)\?/\1/p'
 /et\
c/nsswitch.conf | xargs

gives

group

and the difference seems to come from the presence of the "w" character.

Thus the passwd and shadow entries are turned off in /etc/nsswitch.conf on each 
package upgrade.

Replacing the character class [a-z] by [[:alpha:]] seems to restore 
functionality:

LANG=C sed -n 
's/^[[:space:]]*\([[:alpha:]]*\)[[:space:]]*:.*[[:space:]]ldap\([[:space:]].*\)\?/\1/p'
 /etc/nsswitch.conf | xargs
passwd group shadow

LANG=sv_SE.UTF-8 sed -n 
's/^[[:space:]]*\([[:alpha:]]*\)[[:space:]]*:.*[[:space:]]ldap\([[:space:]].*\)\?/\1/p'
 /etc/nsswitch.conf | xargs
passwd group shadow

Found this on a bullseye-bookworm test upgrade. For some reason, checking the 
nsswitch file did not occur to me until after lots of checks for 
LDAP/SSL/Database problems etc. Then I remembered the same thing happend a few 
years ago on the buster->bullseye upgrade. Thus I really should have isolated 
and reported the problem years ago. Sorry about that.

Thanks for maintaining (and being upstream) for this package.

Arne


-- System Information:
Debian Release: bookworm/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-3-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=sv_SE.UTF-8, LC_CTYPE=sv_SE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libnss-ldapd depends on:
ii  debconf [debconf-2.0]  1.5.82
ii  libc6                  2.36-8
ii  nslcd [nslcd-2]        0.9.12-3

libnss-ldapd recommends no packages.

libnss-ldapd suggests no packages.

-- debconf-show failed

Reply via email to