libnss-ldap prevents zimbra from working

[juergenmw]

Hey

I've done an install using the posixUserAccount admin extension to administrate the system user in zimbra's admin GUI. I've done this several times for remote machines, but now zimbra runs on the same machine where the linux users are needed by ldap/libnss.

Now i get some strange errors - after installing libnss-ldap (debian 4.0) antivir and antispam won't start anymore (it worked before).

zmamavisdctl start
/usr/bin/perl: symbol lookup error: /opt/zimbra/zimbramon/lib/i486-linux-gnu-thread-multi/auto/DB_File/DB_File.so: undefined symbol: db_version

i had no idea what to do, so i removed /etc/libnss-ldap.conf and got a new error:

zmamavisdctl start
perl: ldap-nss.c:1376: do_init: Assertion `cfg->ldc_uris[__session.ls_current_uri] != ((void *)0)' failed.
/opt/zimbra/bin/zmamavisdctl: line 74:  2711 Aborted                 ${zimbra_home}/amavisd/sbin/amavisd -c ${zimbra_home}/conf/amavisd.conf

from now it was clear that libnss-ldap was the reason ... i removed the package and everything was fine again.

The problem is - I really need the users beeing able to authenticate against ldap on this machine - any ideas?

regards
juergenmw

[juergenmw]

ok, i 've re-checked all settings today - especially for conflicting UIDs (local and ldap ID). I did a new installation of libnss-ldap, restartet zimbra and the problem still remains.

[juergenmw]

any idea to debug this?
Zimbra brings a huge chroot-like environment and I've no idea if/how it's possible to use strace or similar tools

[pmb]

When I comment out one ldap search in /etc/nsswitch.conf so it looks like this:

passwd:         compat ldap
group:          compat ldap
shadow:         compat #ldap

this error disappears.

I have another zimbra installation where nss works just fine w/o any comments. The difference is that on the working installation there are ldap entries in pam config files so I think it might be this.

[nito]

Add the following to the /opt/zimbra/.bashrc

export LD_LIBRARY_PATH=/opt/zimbra/sleepycat/lib

this should fix it (at least it did it for me)