Re: Again netgroup problems

2015-07-05 Thread Giorgio Pioda
On Sun, Jul 05, 2015 at 12:28:00PM +0200, Andreas B. Mundt wrote:
> Hi,
> 
> On Sun, Jul 05, 2015 at 11:40:36AM +0200, Giorgio Pioda wrote:
> 
> > I can confirm a boot race condition (IIRC somebody talked six months ago 
> > about
> > autofs/systemd issues in this mailing list)
> >
> > Restarting manually the sercvices in the (more or less correct) order on 
> > tjener:
> >
> > 1) nscd & nslcd
> > 2) nfs-common nfs-kernel
> > 3) autofs
> >
> > Fixes WS login
> >
> > I guess some careful upstream check is really needed
> 
> Perhaps https://bugs.debian.org/759544>?
> 
> It's probably still an issue in stable.


This morning again reproduced at boot.

In /var/log/daemon.log I see the following error, related to a blocked WS:

Jul  6 08:03:42 client8855 nslcd[1279]: version 0.9.4 starting
Jul  6 08:03:45 client8855 nslcd[1279]: accepting connections
Jul  6 08:03:45 client8855 nslcd[1262]: Starting LDAP connection daemon: nslcd.
Jul  6 08:03:49 client8855 nslcd[1279]: [b0dc51]  (re)loading 
/etc/nsswitch.conf
Jul  6 08:07:38 client8855 nslcd[1279]: [16231b]  (re)loading 
/etc/nsswitch.conf
Jul  6 08:15:39 client8855 nslcd[1279]: [6afb66]  request denied by 
validnames option

Until now I've havent seen any nslcd error log refferd to the tjener 
-- 
Giorgio Pioda - Sysadmin SPSE-Tenero
Cell +41 79 629 20 63
Tel  +41 58 468 62 48
Fax  +41 58 468 61 98


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150706062730.ga9...@macchianera.pioderia.lan



Re: Cannot enter home directory. Using /.

2015-07-05 Thread Holger Levsen
Hi Wolfgang,

On Sonntag, 5. Juli 2015, Wolfgang Schweer wrote:
> On Sat, Jul 04, 2015 at 09:01:00AM +, Tom Duguid wrote:
> > I have a SckoleLinux server installed with the main server and
> > workstation options selected for install.
> > I have 10 workstations with SkoleLinux installed.
> > I made a mistake when installing some of the workstations using
> > sitesummary2ldap so I removed them using GOSA2.
> > I used 'sitesummary2ldap -a -i ether-xx:xx:xx:xx:xx:xx -t workstations'
> > to put the workstations back on the server.
> > The workstations that I had NOT added and removed previous to this
> > worked.
> > The workstations that I had added by mistake and removed previous to
> > this came up with the following error whenever any user attempts to log
> > in: 'Cannot enter home directory. Using /.'
> > 
> > I can recreate this on a Virtual Machine setup by adding a workstation
> > client to the VM server (it works at this point) and then removing it
> > through GOSA2 and adding it again through sitesummary2ldap. When I try
> > to log into the VM workstation I get the 'Cannot enter home directory.
> > Using /.' error again.
> 
> Confirmed for a combined server (jessie) and clients in a VirtualBox
> test environment.
> 
> I was able log in after disabling the nscd netgroup cache using these
> steps (on tjener):
> 
> service nscd stop
> rm /var/cache/nscd/netgroup
> sed -i '/netgroup/ s/yes/no/' /etc/nscd.conf
> service nscd start
> service nslcd restart
> service nfs-kernel-server restart
> 
> Please consider to test the workaround.

can you please put this into a nice bug report? we'll need this to get the fix 
into jessie... thanks already! ;-)


cheers,
Holger




signature.asc
Description: This is a digitally signed message part.


Re: Cannot enter home directory. Using /.

2015-07-05 Thread Giorgio Pioda
On Sun, Jul 05, 2015 at 07:57:15PM +0200, Wolfgang Schweer wrote:
> Hi,
> 
> cc'ing to the debian-edu mailing list, where more people could give 
> advice. Please consider to subscribe to the list if not yet done.
> 
> On Sat, Jul 04, 2015 at 09:01:00AM +, Tom Duguid wrote:
> > 
> > I have a SckoleLinux server installed with the main server and 
> > workstation options selected for install.
> > I have 10 workstations with SkoleLinux installed.
> > I made a mistake when installing some of the workstations using 
> > sitesummary2ldap so I removed them using GOSA2.
> > I used 'sitesummary2ldap -a -i ether-xx:xx:xx:xx:xx:xx -t workstations' 
> > to put the workstations back on the server.
> > The workstations that I had NOT added and removed previous to this 
> > worked.
> > The workstations that I had added by mistake and removed previous to 
> > this came up with the following error whenever any user attempts to log 
> > in: 'Cannot enter home directory. Using /.'
> > 
> > I can recreate this on a Virtual Machine setup by adding a workstation 
> > client to the VM server (it works at this point) and then removing it 
> > through GOSA2 and adding it again through sitesummary2ldap. When I try 
> > to log into the VM workstation I get the 'Cannot enter home directory. 
> > Using /.' error again.
> 
> Confirmed for a combined server (jessie) and clients in a VirtualBox 
> test environment.
> 
> I was able log in after disabling the nscd netgroup cache using these 
> steps (on tjener):
> 
> service nscd stop
> rm /var/cache/nscd/netgroup 
> sed -i '/netgroup/ s/yes/no/' /etc/nscd.conf 
> service nscd start
> service nslcd restart
> service nfs-kernel-server restart
> 
> Please consider to test the workaround.
> 
> Wolfgang
> 

Aha, that's it. Looks like the same problem as mine.

Regards

-- 
Giorgio Pioda - Sysadmin SPSE-Tenero
Cell +41 79 629 20 63
Tel  +41 58 468 62 48
Fax  +41 58 468 61 98


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150705213908.gc4...@amiata.pioderia.lan



Re: Again netgroup problems

2015-07-05 Thread Giorgio Pioda
On Sun, Jul 05, 2015 at 11:03:04PM +0200, Wolfgang Schweer wrote:
> On Sun, Jul 05, 2015 at 12:35:57PM +0200, Giorgio Pioda wrote:
> > On Sun, Jul 05, 2015 at 12:28:00PM +0200, Andreas B. Mundt wrote:
> > > Hi,
> > > 
> > > On Sun, Jul 05, 2015 at 11:40:36AM +0200, Giorgio Pioda wrote:
> > > 
> > > > I can confirm a boot race condition (IIRC somebody talked six 
> > > > months ago about autofs/systemd issues in this mailing list)
> > > >
> > > > Restarting manually the sercvices in the (more or less correct) 
> > > > order on tjener:
> > > >
> > > > 1) nscd & nslcd
> > > > 2) nfs-common nfs-kernel
> > > > 3) autofs
> > > >
> > > > Fixes WS login
> > > >
> > > > I guess some careful upstream check is really needed
> > > 
> > > Perhaps https://bugs.debian.org/759544>?
> > > 
> > > It's probably still an issue in stable.
> > 
> > Yes, this is it, I guess.
> > 
> > Not 1 in 5 reboot, probably 4 on 5.
> > 
> > Tomorrow I'll reboot and see if it get stuck again.
>  
> In a VirtualBox test environment (combined server, gateway, workstation 
> and in addition five diskless workstations which are forced to use KDM and 
> NFS by setting DEFAULT_DISPLAY_MANAGER=/usr/bin/kdm in lts.conf) I've 
> rebooted the main server 7 times; logging into randomly chosen 
> workstations was successful each time.
> 
> As reported, I've disabled nscd netgroup caching. This might serve as a 
> workaround until a real fix for the problem is available.
> 
> On tjener:
> service nscd stop
> rm /var/cache/nscd/netgroup 
> sed -i '/netgroup/ s/yes/no/' /etc/nscd.conf 
> service nscd start
> service nslcd restart
> service nfs-kernel-server restart
> 
> Wolfgang


Thanks a lot for you involvment,

tomorrow (today almost) I'll try again. Sometimes I rebooted
without plugging the ethernet cable first (I'm switching
between actual tjener and the new jessie for quick needs). Maybe
the plugged/unplugged ethernet makes the difference?

Regards

Giorgio


-- 
Giorgio Pioda - Sysadmin SPSE-Tenero
Cell +41 79 629 20 63
Tel  +41 58 468 62 48
Fax  +41 58 468 61 98


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150705213503.gb4...@amiata.pioderia.lan



Re: Again netgroup problems

2015-07-05 Thread Wolfgang Schweer
On Sun, Jul 05, 2015 at 12:35:57PM +0200, Giorgio Pioda wrote:
> On Sun, Jul 05, 2015 at 12:28:00PM +0200, Andreas B. Mundt wrote:
> > Hi,
> > 
> > On Sun, Jul 05, 2015 at 11:40:36AM +0200, Giorgio Pioda wrote:
> > 
> > > I can confirm a boot race condition (IIRC somebody talked six 
> > > months ago about autofs/systemd issues in this mailing list)
> > >
> > > Restarting manually the sercvices in the (more or less correct) 
> > > order on tjener:
> > >
> > > 1) nscd & nslcd
> > > 2) nfs-common nfs-kernel
> > > 3) autofs
> > >
> > > Fixes WS login
> > >
> > > I guess some careful upstream check is really needed
> > 
> > Perhaps https://bugs.debian.org/759544>?
> > 
> > It's probably still an issue in stable.
> 
> Yes, this is it, I guess.
> 
> Not 1 in 5 reboot, probably 4 on 5.
> 
> Tomorrow I'll reboot and see if it get stuck again.
 
In a VirtualBox test environment (combined server, gateway, workstation 
and in addition five diskless workstations which are forced to use KDM and 
NFS by setting DEFAULT_DISPLAY_MANAGER=/usr/bin/kdm in lts.conf) I've 
rebooted the main server 7 times; logging into randomly chosen 
workstations was successful each time.

As reported, I've disabled nscd netgroup caching. This might serve as a 
workaround until a real fix for the problem is available.

On tjener:
service nscd stop
rm /var/cache/nscd/netgroup 
sed -i '/netgroup/ s/yes/no/' /etc/nscd.conf 
service nscd start
service nslcd restart
service nfs-kernel-server restart

Wolfgang



signature.asc
Description: Digital signature


Re: Cannot enter home directory. Using /.

2015-07-05 Thread Wolfgang Schweer
Hi,

cc'ing to the debian-edu mailing list, where more people could give 
advice. Please consider to subscribe to the list if not yet done.

On Sat, Jul 04, 2015 at 09:01:00AM +, Tom Duguid wrote:
> 
> I have a SckoleLinux server installed with the main server and 
> workstation options selected for install.
> I have 10 workstations with SkoleLinux installed.
> I made a mistake when installing some of the workstations using 
> sitesummary2ldap so I removed them using GOSA2.
> I used 'sitesummary2ldap -a -i ether-xx:xx:xx:xx:xx:xx -t workstations' 
> to put the workstations back on the server.
> The workstations that I had NOT added and removed previous to this 
> worked.
> The workstations that I had added by mistake and removed previous to 
> this came up with the following error whenever any user attempts to log 
> in: 'Cannot enter home directory. Using /.'
> 
> I can recreate this on a Virtual Machine setup by adding a workstation 
> client to the VM server (it works at this point) and then removing it 
> through GOSA2 and adding it again through sitesummary2ldap. When I try 
> to log into the VM workstation I get the 'Cannot enter home directory. 
> Using /.' error again.

Confirmed for a combined server (jessie) and clients in a VirtualBox 
test environment.

I was able log in after disabling the nscd netgroup cache using these 
steps (on tjener):

service nscd stop
rm /var/cache/nscd/netgroup 
sed -i '/netgroup/ s/yes/no/' /etc/nscd.conf 
service nscd start
service nslcd restart
service nfs-kernel-server restart

Please consider to test the workaround.

Wolfgang



signature.asc
Description: Digital signature


Re: Again netgroup problems

2015-07-05 Thread Giorgio Pioda
On Sun, Jul 05, 2015 at 12:28:00PM +0200, Andreas B. Mundt wrote:
> Hi,
> 
> On Sun, Jul 05, 2015 at 11:40:36AM +0200, Giorgio Pioda wrote:
> 
> > I can confirm a boot race condition (IIRC somebody talked six months ago 
> > about
> > autofs/systemd issues in this mailing list)
> >
> > Restarting manually the sercvices in the (more or less correct) order on 
> > tjener:
> >
> > 1) nscd & nslcd
> > 2) nfs-common nfs-kernel
> > 3) autofs
> >
> > Fixes WS login
> >
> > I guess some careful upstream check is really needed
> 
> Perhaps https://bugs.debian.org/759544>?
> 
> It's probably still an issue in stable.

Yes, this is it, I guess.

Not 1 in 5 reboot, probably 4 on 5.

Tomorrow I'll reboot and see if it get stuck again.

-- 
Giorgio Pioda - Sysadmin SPSE-Tenero
Cell +41 79 629 20 63
Tel  +41 58 468 62 48
Fax  +41 58 468 61 98


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20150705103557.ga13...@macchianera.pioderia.lan



Re: Again netgroup problems

2015-07-05 Thread Andreas B. Mundt
Hi,

On Sun, Jul 05, 2015 at 11:40:36AM +0200, Giorgio Pioda wrote:

> I can confirm a boot race condition (IIRC somebody talked six months ago about
> autofs/systemd issues in this mailing list)
>
> Restarting manually the sercvices in the (more or less correct) order on 
> tjener:
>
> 1) nscd & nslcd
> 2) nfs-common nfs-kernel
> 3) autofs
>
> Fixes WS login
>
> I guess some careful upstream check is really needed

Perhaps https://bugs.debian.org/759544>?

It's probably still an issue in stable.

Regards,

Andi


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150705102800.GA3314@flashgordon



Re: Again netgroup problems

2015-07-05 Thread Giorgio Pioda
On Sun, Jul 05, 2015 at 11:31:07AM +0200, Giorgio Pioda wrote:
> Hi,
> 
> yeterday evening ath the end the WS login was ok on 4 clients...
> 
> This morning still functional.
> 
> Then I wanted to set async mode to nfs and doing this i rebooted
> the tjener instead of restarting only nfs services (I'v been lazy),
> and SURPRISE. Login is not any more possible. Even reverting back
> to sync mode doersn't change, so i guess the triggering event has been
> the reboot, not the nfs modification.
> 
> More. Calling nscd -i hangs for long time. Thus i restarted manually
> nscd and nslcd, after this nscd -i started running again. But still no
> WS login.
> 
> I'm slowly thinking that there is some kind of race condition at boot
> between ncsd/autofs/nfs4. Woould be wise if someboby else could
> try to reproduce my events.

Hi,

I can confirm a boot race condition (IIRC somebody talked six months ago about
autofs/systemd issues in this mailing list)

Restarting manually the sercvices in the (more or less correct) order on tjener:

1) nscd & nslcd
2) nfs-common nfs-kernel
3) autofs

Fixes WS login

I guess some careful upstream check is really needed

Regards
-- 
Giorgio Pioda - Sysadmin SPSE-Tenero
Cell +41 79 629 20 63
Tel  +41 58 468 62 48
Fax  +41 58 468 61 98


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20150705094036.gb10...@macchianera.pioderia.lan



Again netgroup problems

2015-07-05 Thread Giorgio Pioda
Hi,

yeterday evening ath the end the WS login was ok on 4 clients...

This morning still functional.

Then I wanted to set async mode to nfs and doing this i rebooted
the tjener instead of restarting only nfs services (I'v been lazy),
and SURPRISE. Login is not any more possible. Even reverting back
to sync mode doersn't change, so i guess the triggering event has been
the reboot, not the nfs modification.

More. Calling nscd -i hangs for long time. Thus i restarted manually
nscd and nslcd, after this nscd -i started running again. But still no
WS login.

I'm slowly thinking that there is some kind of race condition at boot
between ncsd/autofs/nfs4. Woould be wise if someboby else could
try to reproduce my events.

Regards 

Giorgio

-- 
Giorgio Pioda - Sysadmin SPSE-Tenero
Cell +41 79 629 20 63
Tel  +41 58 468 62 48
Fax  +41 58 468 61 98


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20150705093107.ga10...@macchianera.pioderia.lan