Re: Sun One Webserver 6.1 with openLDAP client auth crashes

Well it turns out there were multiple issues.

The Sun One webserver will load nss_ldap.so.1 from /usr/lib if it
finds that the box is on ldap authentication. Theres no way to change
this, it will allways load this library. The problem is that if this
library is not from the original sun LDAP stack during startup the
server will make a function call that is only available in the SUN
package, so if you had to replace that file with something else - in
our case the PADL/OpenLDAP package and nss_ldap library it will crash
during the startup process. However the rest of the system will need
the PADL nss_ldap for proper ssh, ftp authentication.

The solution that I implemented was to modify the server startup so
before it actualy starts the server the script makes a symlink to the
original sun nss_ldap, start the server, sleep 5 to let the services
load, and then restore the symlink to the PADL nss_ldap once the
iplanet server is running. The webserver wil stay alive and the user
authentication will not work for only those 5 seconds. It is not really
elegant but I couldnt find another way to circumvent this. Even if the
LD_LIBRARY_PATH for the webserver was totally modified it would pull
everything else from that LD_LIBRARY_PATH except that single file.

Hope this will help somebody out there that might have run into the
same problem.

Cheers:

Lorand Marton

www.sinvatech.com

.

Relevant Pages

  • Re: Sun One Webserver 6.1 with openLDAP client auth crashes
    ... The Sun One webserver will load nss_ldap.so.1 from /usr/lib if it ... the PADL nss_ldap for proper ssh, ftp authentication. ... The solution that I implemented was to modify the server startup so ...
    (comp.sys.sun.admin)
  • pam_ldap and ssh keys
    ... Has anyone had success in getting ssh key based authentication to work ... We are using Sun One server 5.2p4, and I'm testing with a Solaris 10 ... We are getting mixed messages from Sun on whether this is even possible. ...
    (SunManagers)
  • RES: Very Slow Samba
    ... I don't use authentication on this server, ... Assunto: Re: Very Slow Samba ... About 2 mins to load. ...
    (freebsd-questions)
  • Re: sunmanagers digest, Vol 1 #2105 - 7 msgs
    ... >This is a logical disk. ... The question is whether those pre-defined partitions ... >are because of something Sun is doing, or if its something EMC is doing. ... >> server and configuration server, image server is the same server. ...
    (SunManagers)
  • Sun Managers Frequently Asked Questions (FAQ)
    ... The List Server maintainer is Bill Bradford <mrbill at mrbill dot ... What fields can I use to filter Sun Managers email? ... newsgroups and mailing lists around to cover the marginal topics. ...
    (SunManagers)