Openldap update problem
Ryan Golhar
golharam at umdnj.edu
Thu Sep 2 18:14:30 UTC 2004
This morning, I came in to work and was told no one could log on to any
of the linux machines. After some digging, I checked the LDAP directory
and found out it was totally empty -- it was overwritten.
I was able to recreate it based on /etc/passwd and /etc/shadow, but then
proceeded to find out why. I found out that last night, new ldap rpms
were installed by up2date:
[Thu Sep 2 00:32:14 2004] up2date installing packages:
['nss_ldap-207-11', 'openldap-2.0.27-15', 'openldap-clients-2.0.27-15',
'openldap-servers-2.0.27-15']
[Thu Sep 2 00:32:27 2004] up2date Removing packages from package
profile: ['nss_ldap-207-10', 'openldap-2.0.27-11',
'openldap-clients-2.0.27-11', 'openldap-servers-2.0.27-11']
[Thu Sep 2 00:32:28 2004] up2date Adding packages to package profile:
['nss_ldap-207-11', 'openldap-2.0.27-15', 'openldap-clients-2.0.27-15',
'openldap-servers-2.0.27-15']
[Thu Sep 2 00:32:29 2004] up2date deleting
/var/spool/up2date/nss_ldap-207-11.i386.rpm
[Thu Sep 2 00:32:29 2004] up2date deleting
/var/spool/up2date/nss_ldap-207-11.i386.hdr
[Thu Sep 2 00:32:29 2004] up2date deleting
/var/spool/up2date/openldap-2.0.27-15.i386.rpm
[Thu Sep 2 00:32:29 2004] up2date deleting
/var/spool/up2date/openldap-2.0.27-15.i386.hdr
[Thu Sep 2 00:32:29 2004] up2date deleting
/var/spool/up2date/openldap-clients-2.0.27-15.i386.hdr
[Thu Sep 2 00:32:29 2004] up2date deleting
/var/spool/up2date/openldap-clients-2.0.27-15.i386.rpm
[Thu Sep 2 00:32:29 2004] up2date deleting
/var/spool/up2date/openldap-servers-2.0.27-15.i386.hdr
[Thu Sep 2 00:32:29 2004] up2date deleting
/var/spool/up2date/openldap-servers-2.0.27-15.i386.rpm
I've now marked ldap to be skipped in updates, but am curious if this is
normal behaviour.
Thank god I keep everything in /etc/passwd and /etc/shadow just in case.
-----
Ryan Golhar
Computational Biologist
The Informatics Institute at
The University of Medicine & Dentistry of NJ
Phone: 973-972-5034
Fax: 973-972-7412
Email: golharam at umdnj.edu
More information about the redhat-list
mailing list