Openldap update problem

[Ryan Golhar]

Argh.  Fustrating isn't it?  

I wish this was in the LDAP documentation on RedHat's site.  I would
have put LDAP in the skipList a long time ago...

-----
Ryan Golhar
Computational Biologist
The Informatics Institute at
The University of Medicine & Dentistry of NJ

Phone: 973-972-5034
Fax: 973-972-7412
Email: golharam at umdnj.edu

-----Original Message-----
From: Nathaniel Hall [mailto:halln at otc.edu] 
Sent: Thursday, September 02, 2004 2:27 PM
To: golharam at umdnj.edu; General Red Hat Linux discussion list
Subject: Re: Openldap update problem


We came in to the same problem this morning.  What we ended up doing was

restoring from a backed up ldif file.  Once we had it partially working,

another fix came out and broke it again.

Nathaniel Hall
Intrusion Detection and Firewall Technician
Ozarks Technical Community College -- Office of Computer Networking

halln at otc.edu
417-799-0552



Ryan Golhar wrote:

>This morning, I came in to work and was told no one could log on to any

>of the linux machines.  After some digging, I checked the LDAP 
>directory and found out it was totally empty -- it was overwritten.
>
>I was able to recreate it based on /etc/passwd and /etc/shadow, but 
>then proceeded to find out why.  I found out that last night, new ldap 
>rpms were installed by up2date:
>
>[Thu Sep  2 00:32:14 2004] up2date installing packages: 
>['nss_ldap-207-11', 'openldap-2.0.27-15', 'openldap-clients-2.0.27-15',

>'openldap-servers-2.0.27-15'] [Thu Sep  2 00:32:27 2004] up2date 
>Removing packages from package
>profile: ['nss_ldap-207-10', 'openldap-2.0.27-11', 
>'openldap-clients-2.0.27-11', 'openldap-servers-2.0.27-11'] [Thu Sep  2

>00:32:28 2004] up2date Adding packages to package profile: 
>['nss_ldap-207-11', 'openldap-2.0.27-15', 'openldap-clients-2.0.27-15',

>'openldap-servers-2.0.27-15'] [Thu Sep  2 00:32:29 2004] up2date 
>deleting /var/spool/up2date/nss_ldap-207-11.i386.rpm
>[Thu Sep  2 00:32:29 2004] up2date deleting
>/var/spool/up2date/nss_ldap-207-11.i386.hdr
>[Thu Sep  2 00:32:29 2004] up2date deleting
>/var/spool/up2date/openldap-2.0.27-15.i386.rpm
>[Thu Sep  2 00:32:29 2004] up2date deleting
>/var/spool/up2date/openldap-2.0.27-15.i386.hdr
>[Thu Sep  2 00:32:29 2004] up2date deleting
>/var/spool/up2date/openldap-clients-2.0.27-15.i386.hdr
>[Thu Sep  2 00:32:29 2004] up2date deleting
>/var/spool/up2date/openldap-clients-2.0.27-15.i386.rpm
>[Thu Sep  2 00:32:29 2004] up2date deleting
>/var/spool/up2date/openldap-servers-2.0.27-15.i386.hdr
>[Thu Sep  2 00:32:29 2004] up2date deleting
>/var/spool/up2date/openldap-servers-2.0.27-15.i386.rpm
>
>
>I've now marked ldap to be skipped in updates, but am curious if this 
>is normal behaviour.
>
>Thank god I keep everything in /etc/passwd and /etc/shadow just in 
>case.
>
>-----
>Ryan Golhar
>Computational Biologist
>The Informatics Institute at
>The University of Medicine & Dentistry of NJ
>
>Phone: 973-972-5034
>Fax: 973-972-7412
>Email: golharam at umdnj.edu
>
>
>  
>