ryan.g.steele@gmail.com wrote:
Full_Name: Ryan Steele Version: 2.4.34 OS: Ubuntu, RedHat URL: Submission from: (NULL) (12.150.6.65)
According to https://github.com/gcp/openldap/blob/master/contrib/slapd-modules/nssov/nsso..., nssov tries to create the socket/PID directory /var/run/nslcd if it does not exist. However, that mkdir attempt will always fail because slapd runs as a non-privileged user and the permissions on /var/run are, appropriately, root:root and 755. As a result, when a system using slapd+nssov is rebooted, slapd fails to start and user lookups thusly fail until /var/run/nslcd is manually created so that slapd can be started.
Nonsense. That mkdir cannot cause slapd to fail to start, since its success/failure result is ignored. Take this up with your distro provider if the directory isn't available at start time. Closing this ITS.