Neil Marjoram wrote:
> John,
>
> Testing was a little light! I had 3 hours to load RHEL 5.1, Ldap, DNS,

I can imagine the circumstances.

> DHCP, TFTP, Samba, NFS, secure the box, and restart all the mail and web
> services on the other boxes, and test everything was working, and get
> the M$ boxes talking again! I had already done the backup server, but
> theres always something! Maybe if LDAP or DNS could cause these troubles
> it was indeed them, LDAP was a pain, it's my belief that the authconfig
> does not set nsswitch.conf correctly to avoid LDAP timeouts. I always

fwiw I have an outstanding (since fc6 but I've verified it in CentOS5)
concerning using authconfig in kickstart, and then adding users in %post.

ldap isn't running, and it takes about 15 minutes per user. Originally I
wrote it off as hung, but lately I've been starting a ks install then
going on with other stuff. I'm a lot more patient then:-)



> manually set [!NOTFOUND = return] after files and remove ldap after
> shadow as I have found the LDAP server will not start quickly as it
> looks for the LDAP server when it starts! (I am guessing but I think it
> looks for the user ldap, which is in /etc/passwd, but carries on
> looking for ldap anyway even though the use has already been found).

Sounds plausible. I think RH needs some pressure from paying customers
to get this fixed:-)


>
> If I get more time and it happens again I will test further.
>
> Many thanks,
>
> Neil.
>
> John Summerfield wrote:
>> Ian Kent wrote:
>>> On Tue, 2008-04-15 at 13:14 +0100, Neil Marjoram wrote:
>>
>>>> not really have any impact. The other odd behavior on the x64
>>>> machines, maybe related is that for some time after install they
>>>> could not cd ~user1. However this morning they can!
>>>
>> <nips>
>>
>>> That last symptom you mentioned is odd!
>>
>> I don't know what testing Neil did, but possibly not much, depending
>> what was on his mind at the time.
>>
>> I'm thinking some kind of timeout, after which all comes good. tcpdump
>> should show what's what.
>>
>> Could be related to lots of things - a DNS server down can cause lots
>> of grief, authentication delays (maybe DNS related, maybe LDAP).
>> Perhaps data gets cached, when found, and all's well until next time.
>>
>>
>>
>>
>


--

Cheers
John

-- spambait
1aaaaaaa@(protected)
-- Advice
http://webfoot.com/advice/email.top.php
http://www.catb.org/~esr/faqs/smart-questions.html
http://support.microsoft.com/kb/555375

You cannot reply off-list:-)

_______________________________________________
rhelv5-list mailing list
rhelv5-list@(protected)
https://www.redhat.com/mailman/listinfo/rhelv5-list