April 2014 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 623886] New: no login possible over ldap server
by bugzilla_noreply＠novell.com 15 Apr '16

15 Apr '16

http://bugzilla.novell.com/show_bug.cgi?id=623886 http://bugzilla.novell.com/show_bug.cgi?id=623886#c0 Summary: no login possible over ldap server Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: x86-64 OS/Version: openSUSE 11.3 Status: NEW Severity: Major Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: hiller(a)mpia-hd.mpg.de QAContact: qa(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.6) Gecko/20100626 SUSE/3.6.6-1.2 Firefox/3.6.6 I installed opensuse 11.3 on x86_64. Everything works, except ldap First: On the previous OS versions including opensuse 11.2 everything was working perfectly.Now with 11.3 I cannot login anymore with an ldap user account (local logins are working) These ldap/pam/nscd pakets are installed on my opensuse 11.3 machine: ~> rpm -qa | grep ldap libldap-2_4-2-32bit-2.4.21-9.1.x86_64 nss_ldap-32bit-265-4.2.x86_64 yast2-ldap-2.17.3-12.2.x86_64 nss_ldap-265-4.2.x86_64 libldap-2_4-2-2.4.21-9.1.x86_64 libldapcpp1-0.2.1-3.2.x86_64 openldap2-2.4.21-9.1.x86_64 pam_ldap-185-4.2.x86_64 openldap2-client-2.4.21-9.1.x86_64 pam_ldap-32bit-185-4.2.x86_64 yast2-ldap-client-2.19.2-1.4.noarch openldap2-devel-2.4.21-9.1.x86_64 ~> rpm -qa | grep pam gnome-keyring-pam-2.30.1-2.11.x86_64 pam-modules-32bit-11.2-8.1.x86_64 pam-modules-11.2-8.1.x86_64 pam-32bit-1.1.1.90-1.6.x86_64 pam_apparmor-2.3-57.1.x86_64 pam-config-0.73-2.10.x86_64 pam_apparmor-32bit-2.3-57.1.x86_64 gnome-keyring-pam-32bit-2.30.1-2.11.x86_64 pam-1.1.1.90-1.6.x86_64 pam_ldap-185-4.2.x86_64 pam-devel-1.1.1.90-1.6.x86_64 pam_ldap-32bit-185-4.2.x86_64 yast2-pam-2.19.1-3.2.noarch ~> rpm -qa | grep nscd libnscd-2.0.2-113.1.x86_64 nscd-2.11.2-2.4.x86_64 libnscd-32bit-2.0.2-113.1.x86_64 /etc/openldap/ldap.conf is a softlink to /etc/ldap.conf In /etc/ldap.conf the line tls_cacertdir /etc/ssl/certs is not commented. Since I deleted the comment sign 'getent passwd' shows all the users from the ldap server Now I try to login. Local users defined in /etc/passwd can login. When I try to login as an ldap user I get the following messages in /var/log/messages: nss_ldap: could not search LDAP server - Server is unavailable gkr-pam: error looking up user information for: [here is my user name] User not known to the underlying authentication module I can make two workarounds: Login as an ldap user works when I activate in /etc/ldap.conf the line tls_checkpeer no But then it does not check the tls certificate. This is not an acceptable solution for us. The second workaround is to set in /etc/nscd.conf the line enable-cache passwd no (no matter whether I use nscd or unscd) Also this is not a solution, because the network traffic will rise even on simple commands like 'ls -l' I have found in google that nscd has got a problem in 11.3, but what I found does not fit to my problem. Furthermore I do not know whether the reason for my problem is in ldap or nscd Here is the content of /etc/nscd.conf and /etc/ldap.conf /etc/nscd.conf: logfile /var/log/nscd.log debug-level 4 paranoia no enable-cache passwd yes positive-time-to-live passwd 600 negative-time-to-live passwd 20 suggested-size passwd 211 check-files passwd yes persistent passwd yes shared passwd yes max-db-size passwd 33554432 auto-propagate passwd yes enable-cache group yes positive-time-to-live group 3600 negative-time-to-live group 60 suggested-size group 211 check-files group yes persistent group yes shared group yes max-db-size group 33554432 auto-propagate group yes enable-cache hosts yes positive-time-to-live hosts 600 negative-time-to-live hosts 0 suggested-size hosts 211 check-files hosts yes persistent hosts no shared hosts yes max-db-size hosts 33554432 enable-cache services yes positive-time-to-live services 28800 negative-time-to-live services 20 suggested-size services 211 check-files services yes persistent services yes shared services yes max-db-size services 33554432 /etc/ldap.conf: host [this is our ldap server] base o=xxxxxxxx ldap_version 3 bind_policy soft pam_lookup_policy yes pam_check_host_attr yes pam_password crypt ssl start_tls ldap_version 3 pam_filter objectclass=posixAccount nss_base_passwd ou=xxxxx,o=xxxxx nss_base_shadow ou=xxxxx,o=xxxxx nss_base_group ou=xxxxx,o=xxxxx tls_cacertdir /etc/ssl/certs Reproducible: Always Steps to Reproduce: 1.activate nscd and login as an ldap user 2. 3. Actual Results: Login not possible for ldap. Login works only for local users Expected Results: Login fails. In /var/log/messages are the following messages: nss_ldap: could not search LDAP server - Server is unavailable gkr-pam: error looking up user information for: [here is my user name] User not known to the underlying authentication module Workarounds (both not recommendable): 1. Deactivate nscd or activate the line enable-cache passwd no in /etc/nscd.conf 2. activate the line tls_checkpeer no in /etc/ldap.conf -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 21

[Bug 623837] New: Lacking Alsa configuration for PulseAudio ($ALSA_CONFIG_PATH not set for user)
by bugzilla_noreply＠novell.com 15 Apr '16

15 Apr '16

http://bugzilla.novell.com/show_bug.cgi?id=623837 http://bugzilla.novell.com/show_bug.cgi?id=623837#c0 Summary: Lacking Alsa configuration for PulseAudio ($ALSA_CONFIG_PATH not set for user) Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: Other OS/Version: openSUSE 11.3 Status: NEW Severity: Normal Priority: P5 - None Component: Sound AssignedTo: tiwai(a)novell.com ReportedBy: zajec5(a)gmail.com QAContact: qa(a)suse.de Found By: --- Blocker: --- User-Agent: Opera/9.80 (X11; Linux i686; U; pl) Presto/2.6.30 Version/10.60 I installed openSUSE 11.3 and decided to enable PulseAudio support in it. So I installed some packages: 1) pulseaudio 2) alsa-plugins-pulse 3) Dependencies like: libpulse0, libpulse-mainloop-glib0, libxine1-pulse, .. Then enabled PulseAudio using: "yast2 sound" → Other → Configure PulseAudio → Enable PulseAudio. Finally rebooted my machine, just for sure. The result is that PulseAudio works great now, I can do "mplayer -ao pulse file.flac", Amarok works fine as well. The problem is that alsa is not configured properly and it sill tries to play using direct access to sound card, not PulseAudio with it's plugin. There exists /etc/alsa-pulse.conf pointing to /etc/asound-pulse.conf (which also exists), however /etc/alsa-pulse.conf *is not used for non-root user*. ======================================== Following explains everything: > amixer -Dpulse ALSA lib control.c:902:(snd_ctl_open_noupdate) Invalid CTL pulse amixer: Mixer attach pulse error: No such file or directory > echo $ALSA_CONFIG_PATH [no output] > su -c 'echo $ALSA_CONFIG_PATH' Password: /etc/alsa-pulse.conf > export ALSA_CONFIG_PATH=/etc/alsa-pulse.conf > echo $ALSA_CONFIG_PATH /etc/alsa-pulse.conf > amixer -Dpulse Simple mixer control 'Master',0 Capabilities: pvolume pswitch pswitch-joined penum Playback channels: Front Left - Front Right Limits: Playback 0 - 65536 Mono: Front Left: Playback 25237 [39%] [on] Front Right: Playback 25237 [39%] [on] Simple mixer control 'Capture',0 Capabilities: cvolume cswitch cswitch-joined penum Capture channels: Front Left - Front Right Limits: Capture 0 - 65536 Front Left: Capture 65536 [100%] [on] Front Right: Capture 65536 [100%] [on] Reproducible: Always -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 22

[Bug 623763] New: Samba ignores "credentials" option in </etc/fstab> or mount command
by bugzilla_noreply＠novell.com 15 Apr '16

15 Apr '16

http://bugzilla.novell.com/show_bug.cgi?id=623763 http://bugzilla.novell.com/show_bug.cgi?id=623763#c0 Summary: Samba ignores "credentials" option in </etc/fstab> or mount command Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: x86-64 OS/Version: openSUSE 11.3 Status: NEW Severity: Major Priority: P5 - None Component: Samba AssignedTo: samba-maintainers(a)SuSE.de ReportedBy: jimoe(a)sohnen-moe.com QAContact: samba-maintainers(a)SuSE.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.6) Gecko/20100626 SUSE/3.6.6-1.2 Firefox/3.6.6 Linux 2.6.34-12-desktop x86_64 smbd: 3.5.4-4.1-2382-SUSE-SL11.3 I updated from openSuse v11.2 to v11.3. The SMB services are no longer mounted. The reason is that the "credentials" (or "cred") option in </etc/fstab> is ignored, and also when using the mount command. If I remove "credentials" and add "username=xxx,password=yyy", the services are mounted. I cannot tell if it is the "credentials" option or something about the password file (which has 600 permission). There were no messages in <dmesg> about the credentials file, only that the mount failed because of incorrect authentication. The same applies to </var/log/samba/log.smbd>. Note: I decided to make this severity level Major because of the security implications; the passwords are in plain text in a world readable file. See also <http://forums.opensuse.org/english/get-help-here/network-internet/442214-sa…>. Reproducible: Always Steps to Reproduce: 1. Use the "credentials" option in </etc/fstab> to mount remote SMB services, or "mount.cifs //service-name <mount-point> -o credentials=<path-to-cred-file>". 2. Install or upgrade to openSuse v11.3 Actual Results: The services are not mounted at startup or with the mount command. Expected Results: The services are mounted at startup or with the mount command. Here are two typical fstab entries. (The first is an OS/2 server that needs a lot of cajoling.) //sma-server1/graphics /w cifs credentials=/home/sma-user4/.smb/.smbpw,uid=sma-user4,gid=users,sec=lanman,file_mode=0666,dir_mode=0777,servern=SMA-SERVER1,nocase,noserverino 0 0 //sma-nas-01/photos /v cifs credentials=/home/sma-user4/.smb/.smbpw,uid=jmoe,gid=users 0 0 </home/sma-user4/.smb/.smbpw> looks like this: username=xxx password=yyy -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 4

[Bug 623427] New: corosync launched by openais fails with 'couldn't open configuration component 'openaisserviceenableexperimental'' error
by bugzilla_noreply＠novell.com 15 Apr '16

15 Apr '16

http://bugzilla.novell.com/show_bug.cgi?id=623427 http://bugzilla.novell.com/show_bug.cgi?id=623427#c0 Summary: corosync launched by openais fails with 'couldn't open configuration component 'openaisserviceenableexperimental'' error Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: x86-64 OS/Version: openSUSE 11.3 Status: NEW Severity: Critical Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: diego.ercolani(a)gmail.com QAContact: qa(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; it; rv:1.9.2.6) Gecko/20100626 SUSE/3.6.6-1.2 Firefox/3.6.6 I installed openais - pacemaker under 11.2 machine that I have upgraded to 11.3 In 11.3 openais have been splitted in openais and corosync to use pacemaker. The problem is that out of the box corosync doesn't seem to start via the startup script. init script fails with the error: corosync [MAIN ] Corosync Executive couldn't open configuration component 'openaisserviceenableexperimental' where is the lcrso script openaisserviceenableexperimental? I have these files owned by openais-1.1.2-1.3.x86_64 package that I think are outside the search path as is x86-64 architecture: /usr/lib/lcrso/service_lck.lcrso /usr/lib/lcrso/service_ckpt.lcrso /usr/lib/lcrso/openaisserviceenable.lcrso /usr/lib/lcrso/service_tmr.lcrso /usr/lib/lcrso/service_evt.lcrso /usr/lib/lcrso/service_msg.lcrso /usr/lib/lcrso/service_clm.lcrso /usr/lib/lcrso/service_amf.lcrso Infact if I make a symbolic links of /usr/lib/lcrso/openaisserviceenable.lcrso to /usr/lib64/lcrso corosync seem to startup correctly Reproducible: Always Steps to Reproduce: 1. 2. 3. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 20

[Bug 623365] New: ca-certificates-mozilla fails to install cleanly
by bugzilla_noreply＠novell.com 15 Apr '16

15 Apr '16

http://bugzilla.novell.com/show_bug.cgi?id=623365 http://bugzilla.novell.com/show_bug.cgi?id=623365#c0 Summary: ca-certificates-mozilla fails to install cleanly Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: x86-64 OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Java AssignedTo: bnc-team-java(a)forge.provo.novell.com ReportedBy: kkaempf(a)novell.com QAContact: qa(a)suse.de Found By: Development Blocker: --- During "zypper dup" from 11.2 to 11.3 this happened: Installing: ca-certificates-mozilla-1.62-2.3 [done] Additional rpm output: Updating certificates in /etc/ssl/certs... 121 added, 0 removed. creating /var/lib/ca-certificates/ca-bundle.pem ... creating /var/lib/ca-certificates/java-cacerts ... Exception in thread "main" java.io.FileNotFoundException: /etc/ssl/certs/EBG_Elektronik_Sertifika_Hizmet_Sa??lay??c??s??.pem (No such file or directory) at java.io.FileInputStream.open(Native Method) at java.io.FileInputStream.<init>(FileInputStream.java:137) at java.io.FileInputStream.<init>(FileInputStream.java:96) at keystore.main(keystore.java:152) -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 8

[Bug 623290] New: pm-utils: /usr/lib/pm-utils/functions: line 87: log: command not found
by bugzilla_noreply＠novell.com 15 Apr '16

15 Apr '16

http://bugzilla.novell.com/show_bug.cgi?id=623290 http://bugzilla.novell.com/show_bug.cgi?id=623290#c0 Summary: pm-utils: /usr/lib/pm-utils/functions: line 87: log: command not found Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Mobile Devices AssignedTo: mobile-bugs(a)forge.provo.novell.com ReportedBy: jnelson-suse(a)jamponi.net QAContact: qa(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.6) Gecko/20100626 SUSE/3.6.6-1.2 Firefox/3.6.6 Found while debugging some suspend-to-ram issues on my laptop: /usr/lib/pm-utils/functions: line 87: log: command not found This appears to prevent subsequent kernel modules from being unloaded. Reproducible: Always Steps to Reproduce: 1. 2. 3. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 27

[Bug 623255] New: python-zope-interface package is spelled as "python-zopeinterface"
by bugzilla_noreply＠novell.com 15 Apr '16

15 Apr '16

http://bugzilla.novell.com/show_bug.cgi?id=623255 http://bugzilla.novell.com/show_bug.cgi?id=623255#c0 Summary: python-zope-interface package is spelled as "python-zopeinterface" Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: x86-64 OS/Version: openSUSE 11.3 Status: NEW Severity: Normal Priority: P5 - None Component: Other AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: harlowcw(a)gmail.com QAContact: qa(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.6) Gecko/20100626 SUSE/3.6.6-1.2 Firefox/3.6.6 When I try to install Spideroak in software management, it pulls in python-transaction and python-zope-interface as 2 of the dependencies. It keeps asking to break or not install python-transaction because it cannot find "python-zope-interface". This is because the existing package is spelled "python-zopeinterface". Spideroak will work if I tell it ignore the dependencies, but every time I open software manager now it asks me to break "python-transaction" and keeps re-installing it. Reproducible: Always Steps to Reproduce: 1.Install Spideroak 2.Mentions 2 choices, that "python-transaction" can be broken(ignore deps) or abort install, since it cannot find dep "python-zope-interface" 3.See "Deatails" paragraph above Actual Results: As described above, pretty straightforward typo/spelling error in package name Expected Results: working Spideroak, no broken deps Not really critical, except it does cause a problem with software manager every time, but minor, change the name of the package to what is expected, or vise versa, whichever is the proper name of the package. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 4

[Bug 623246] New: pam and apparmor
by bugzilla_noreply＠novell.com 15 Apr '16

15 Apr '16

http://bugzilla.novell.com/show_bug.cgi?id=623246 http://bugzilla.novell.com/show_bug.cgi?id=623246#c0 Summary: pam and apparmor Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: x86-64 OS/Version: openSUSE 11.3 Status: NEW Severity: Normal Priority: P5 - None Component: AppArmor AssignedTo: jeffm(a)novell.com ReportedBy: collinm(a)laboiteaprog.com QAContact: qa(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; fr; rv:1.9.2.6) Gecko/20100626 SUSE/3.6.6-1.2 Firefox/3.6.6 when apparmor is not installed and a user connect to the console, there are message about a missher file but rpm -qa |grep pam ---------------------- pam-1.1.1.90-1.6.x86_64 perl-Mail-SpamAssassin-3.3.1-2.2.x86_64 spamassassin-3.3.1-2.2.x86_64 pam-modules-11.2-8.1.x86_64 yast2-pam-2.19.1-3.2.noarch gnome-keyring-pam-2.30.1-2.11.x86_64 pam-config-0.73-2.10.x86_64 pam_mount-1.34-2.4.x86_64 apparmor is not neccessary Reproducible: Always Steps to Reproduce: 1.connect to console 2.check /var/log/message 3. Actual Results: PAM unable to dlopen(/lib64/security/pam_apparmor.so): /lib64/security/pam_apparmor.so: Ne peut ouvrir le fichier d'objet partagé: Aucun fichier ou dossier de ce type Jul 17 23:50:14 linux-mvat su: PAM adding faulty module: /lib64/security/pam_apparmor.so Expected Results: no message about apparmor is missing -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 12

[Bug 623192] New: crash in lxsession raise: Process /usr/bin/lxsession was killed by signal 6 (SIGABRT)
by bugzilla_noreply＠novell.com 15 Apr '16

15 Apr '16

http://bugzilla.novell.com/show_bug.cgi?id=623192 http://bugzilla.novell.com/show_bug.cgi?id=623192#c0 Summary: crash in lxsession raise: Process /usr/bin/lxsession was killed by signal 6 (SIGABRT) Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Critical Priority: P5 - None Component: LXDE AssignedTo: andrea(a)opensuse.org ReportedBy: andrea(a)opensuse.org QAContact: qa(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/534.3 (KHTML, like Gecko) Chrome/6.0.466.0 Safari/534.3 this bug has been open to follow fedora and upstream bug at the following urls: fedora: https://bugzilla.redhat.com/show_bug.cgi?id=613677 upstream: https://sourceforge.net/tracker/?func=detail&aid=3030576&group_id=180858&at… this is the upstream patch to fix that crasch: http://lxde.git.sourceforge.net/git/gitweb.cgi?p=lxde/lxsession;a=patch;h=b… actually there is already a pending update scheduled for lxsession, i want to ask the maintenance team, if it's ok, to release a single collective package update, that will include this fix as well the security fix of bug#622083 Reproducible: Always -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 9

[Bug 623036] New: Yast Add-on Creator build broken addons when I create multiple addons at one time
by bugzilla_noreply＠novell.com 15 Apr '16

15 Apr '16

http://bugzilla.novell.com/show_bug.cgi?id=623036 http://bugzilla.novell.com/show_bug.cgi?id=623036#c0 Summary: Yast Add-on Creator build broken addons when I create multiple addons at one time Classification: openSUSE Product: openSUSE 11.2 Version: Final Platform: Other OS/Version: openSUSE 11.2 Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: alexo.veto(a)gmail.com QAContact: jsrain(a)novell.com Found By: --- Blocker: --- User-Agent: Opera/9.80 (X11; Linux i686; U; ru) Presto/2.6.30 Version/10.60 Yast Add-on Creator build broken addons when I create multiple addons at one time ( also: I create addons in iso format ) Reproducible: Always Steps to Reproduce: 1. chose addon profile in Add-on Creator and press build - all work 2. after this (without closing Add-on Creator) - chose next addon profile and press build - built addon will also contain files from previous addon if before building addon, restart Add-on Creator - all again work Actual Results: second addon contain files from previous addon -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 16