[nzlug] Help: Trouble after LDAP + NSS configuration

[Steve Holdoway]

On Wed, 13 Feb 2008 21:16:11 +1300 (NZDT)
"Roland Hill" <rolandh at ak.planet.gen.nz> wrote:

> Hi,
> 
> I've got myself into a pickle :-(
> 
> Having (I thought) correctly configured LDAP + NSS, then rebooting (had
> a kernel update), I'm stuck with:
> 
> udevd: nss_ldap: Can't contact server xxxxxx
> 
> This message repeats itself and goes no further.
> 
> Seems this is a known bug, but I hadn't depolyed the solution (see below)
> 
> -------------------8<------------------------------------------
> The problem is caused by the usage of the non existing group 'nvram' in
> /etc/udev//rules.d/40-permissions.rules:
> ...
> KERNEL=="nvram", GROUP="nvram"
> ...
> 
> When udev starts, is looks up 'nvram'. While 'nvram' could not be found
> in /etc/group NSS tries to connect the ldap server. As result the boot
> sequence stops.
> 
> To fix this problem is very easy: Add the local group 'nvram' to
> /etc/groups
> 
> After that booting with nss_ldap and bind_policy hard works without any
> problem.
> ---------------------->8----------------------------------------
> 
> FWIW, here is a link as well:
> 
> https://launchpad.net/distros/ubuntu/+source/libns s-ldap/+bug/51315
> 
> Can somebody advise me how I can use a live CD (I assume) to either
> access the pam.d files and revert their settings, or implement the fix?
> 
> I'm stuck......bug**r!
> 
> -- 
> Roland
> 
> 
> _______________________________________________
> NZLUG mailing list NZLUG at linux.net.nz
> http://www.linux.net.nz/cgi-bin/mailman/listinfo/nzlug

Boot off live cd.
become root
mkdir /old
mount /dev/sda1 /old  ( or guess your root partition if it's not that and you can't find out )
$editorofyourchoice /old/etc/group and add an extra line using an unique group id to define nvram
umount /old
reboot


-- 
Steve Holdoway <steve at greengecko.co.nz>