-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hoi Torsten,

Am So den 29. Mai 2005 um 20:15 schrieb Torsten Landschoff:
> > Nothing else todo, bad weather (~29°C, sunnshine) I did several more
> > debugging of the cron binary.
> 
> I am so sorry. :( I spend the day hacking on OpenLDAP as well. 

:-)

> > Now I located the call to glibc which hangs. There is a hang in
> > "initgroups" in the grandchild.
> > 
> > So I wounder why only cron hangs on this position.
> 
> Good question. Do you know as which user it is calling initgroups? Could

No. But if I leaf it out and recompile cron all works fine except that
logcheck cannot work as it has no primary group adm.

> be that it hits a user with weird credentials that is not used
> otherwise? (Some old account still there and running cronjobs or
> something?)

I have a mixed setup. The system users are in /etc/passwd,shadow and the
user users are in ldap.

This brings me to a other solution:
I change the order in the pam configuration to first try unix and second
ldap but jump over the ldap stuff if unix success.

But this might only put the most important users work. All non-system
users are still buggiefull. Well one other whould be to configure cron
to be completely local but I have to let ldap users run cron jobs.

Regards
   Klaus

Ps. By the way, you doing OpenLDAP hacking. Is there any usable way to
encrypt ldap connections without creating a key on each client? :-)
- -- 
Klaus Ethgen                            http://www.ethgen.de/
pub  2048R/D1A4EDE5 2000-02-26 Klaus Ethgen <[EMAIL PROTECTED]>
Fingerprint: D7 67 71 C4 99 A6 D4 FE  EA 40 30 57 3C 88 26 2B
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iQEVAwUBQpoUBp+OKpjRpO3lAQJHSgf/XXq+bW3X9KWE1dT8z/DVoyg+goq6joW0
4+fPgFHSf7udzVZdlcvyaJfL6+Ab/om0SsuFfgj8FnyUK+JyWhgN8Wo3lSOvF0rL
tTmx0KQxGLi5vXzDL+wSs89XXeqf2Fzzy8w4CveUkCciB0Agd7jokLBc8Lifyml3
5pbZTk7KfXT7HvBMgsMnHCh7dpFia115AZevYPM0M+FYPxnRL9ox0e0JYcAq6aTt
p6mXRUSVvj4QQLHWm6wr7fwWgjUlAotbaNMNxBRfv1t3R6BSwUfs5WFVFntleSdc
Nn4LAeDZrq96QAZR1JmzBn5e8+IltKe6xCmfZbun710+wZqopzSZnA==
=FNF0
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to