Server upgrade with ldap
As I’m on an upgrade roll I decided to upgrade my new server too. It is configured with kerberos and ldap… and this is were the trouble.
ldap⌗
When a service is upgraded in Ubuntu/Debian it is first stopped and than
later restarted when the new files are there. When all your user
information is kept in ldap
, the following sucks:
Preparing to replace slapd 2.4.11-0ubuntu6.1 (using
.../slapd_2.4.15-1ubuntu3_i386.deb) ...
Stopping OpenLDAP: slapd.
Dumping to /var/backups/slapd-2.4.11-0ubuntu6.1:
- directory dc=atoom,dc=net... done.
Unpacking replacement slapd ...
And there goes the neighborhood… everything slows to a crawl, because
every getpwnam
call needs to timeout before /etc/passwd
and friends
are consulted.
So a control-C
(at the wrong time of course, so this gave also
problems) the upgrade process to fix /etc/nsswitch.conf
and disable
ldap-lookups for now:
sudo vi /etc/nsswitch.conf
vi: error while loading shared libraries: libgailutil.so.18: cannot
open shared object file: No such file or directory
oh… oh… Luckily there is also nano
, but as a vim
addict I find
nano
very confusing. After figuring out that control-X
will save the
file I can finally make the change.