Openldap update problem

[Nathaniel Hall]

We came in to the same problem this morning.  What we ended up doing was 
restoring from a backed up ldif file.  Once we had it partially working, 
another fix came out and broke it again.

Nathaniel Hall
Intrusion Detection and Firewall Technician
Ozarks Technical Community College -- Office of Computer Networking

halln at otc.edu
417-799-0552



Ryan Golhar wrote:

>This morning, I came in to work and was told no one could log on to any
>of the linux machines.  After some digging, I checked the LDAP directory
>and found out it was totally empty -- it was overwritten.
>
>I was able to recreate it based on /etc/passwd and /etc/shadow, but then
>proceeded to find out why.  I found out that last night, new ldap rpms
>were installed by up2date:
>
>[Thu Sep  2 00:32:14 2004] up2date installing packages:
>['nss_ldap-207-11', 'openldap-2.0.27-15', 'openldap-clients-2.0.27-15',
>'openldap-servers-2.0.27-15']
>[Thu Sep  2 00:32:27 2004] up2date Removing packages from package
>profile: ['nss_ldap-207-10', 'openldap-2.0.27-11',
>'openldap-clients-2.0.27-11', 'openldap-servers-2.0.27-11']
>[Thu Sep  2 00:32:28 2004] up2date Adding packages to package profile:
>['nss_ldap-207-11', 'openldap-2.0.27-15', 'openldap-clients-2.0.27-15',
>'openldap-servers-2.0.27-15']
>[Thu Sep  2 00:32:29 2004] up2date deleting
>/var/spool/up2date/nss_ldap-207-11.i386.rpm
>[Thu Sep  2 00:32:29 2004] up2date deleting
>/var/spool/up2date/nss_ldap-207-11.i386.hdr
>[Thu Sep  2 00:32:29 2004] up2date deleting
>/var/spool/up2date/openldap-2.0.27-15.i386.rpm
>[Thu Sep  2 00:32:29 2004] up2date deleting
>/var/spool/up2date/openldap-2.0.27-15.i386.hdr
>[Thu Sep  2 00:32:29 2004] up2date deleting
>/var/spool/up2date/openldap-clients-2.0.27-15.i386.hdr
>[Thu Sep  2 00:32:29 2004] up2date deleting
>/var/spool/up2date/openldap-clients-2.0.27-15.i386.rpm
>[Thu Sep  2 00:32:29 2004] up2date deleting
>/var/spool/up2date/openldap-servers-2.0.27-15.i386.hdr
>[Thu Sep  2 00:32:29 2004] up2date deleting
>/var/spool/up2date/openldap-servers-2.0.27-15.i386.rpm
>
>
>I've now marked ldap to be skipped in updates, but am curious if this is
>normal behaviour. 
>
>Thank god I keep everything in /etc/passwd and /etc/shadow just in case.
>
>-----
>Ryan Golhar
>Computational Biologist
>The Informatics Institute at
>The University of Medicine & Dentistry of NJ
>
>Phone: 973-972-5034
>Fax: 973-972-7412
>Email: golharam at umdnj.edu
>
>
>  
>