"CASAcli -l" returns "Found 0 credential sets" after update for glibc (9262)

  • 7015222
  • 18-Jun-2014
  • 24-Jul-2014

Environment

SUSE Linux Enterprise Server 11 Service Pack 3 (SLES 11 SP3)
Novell Open Enterprise Server 11 SP2 (OES11SP2)
Novell DNS
Domain Services for Windows
DSfW

Situation

Novell-DNS fails to start after updating SLES
"CASAcli -l" returns "Found 0 credential sets" after updating SLES
"CASAcli -l" returns "Found 0 credential sets" after installation of glibc update (glibc-2.11.3-17.62.1)
Installed security update for glibc (9262)

Removing "files" from the passwd entry in /etc/nsswitch.conf and restarting CASA - "rcmicasad restart", "CASAcli -l" returns the credentials properly with credentials in CASA start successfully:

Example modifed nssswitch.conf:
passwd: winbind compat nam


Resolution

The problem is in the /lib64/libnss_file-2.11.3.so library  from glibc-2.11.3-17.62.1

Apply glibc-2.11.3-17.66.1 resolves this issue.

Cause

The May Maintenance Patch is not the cause.  The Maintenance Patch can be applied.  The issue is the glibc-2.11.3-17.62.1

Status

Reported to Engineering

Additional Information

The workaround until a new glibc is release is to:

1) Keep "files" in the nssswitch.conf

    Example nssswitch.conf
    passwd: files winbind compat nam

2) Downgrade the glibc to glibc-2.11.3-17.56.2

  rpm -Uvh glibc-2.11.3-17.56.2.x86_64.rpm --force

3) Restart CASA "rcmicasad restart"  and listing the credentials "CASAcli -l"

    The CASA credentials should be returned

4) Restart novell-named or any other service that utilizes CASA.