Stats

  • Locked Locked
  • Replies 11
  • Subscribers 128
  • Views 19987
  • Members are here 0
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

icfb (Ver. 5.1.0) failed to start with openLDAP authentication enabled

rfvlsilab

Hello Folks,

Does anyone who uses openLDAP to manage login credentials?

My setup is icfb 5.1.0 @(#)$CDS: icfb.exe version 5.1.0 10/28/2008 10:23 (cicln03) $ the user account is authenticated by ldap.

when I tried to start icfb, the following message appears:

  *WARNING* voInit failed to find the passwd entry for (null), using '/tmp' for a home directory.
The most likely cause of this problem is the failure of NIS lookups.
Please contact your system administrator.
*WARNING* clsInit failed: Success
*WARNING* file /home/<my_account>/CDS.log Success
*WARNING* file /home/<my_account>/CDS.log.1 Success
*WARNING* file /home/<my_account>/CDS.log.2 Success
*WARNING* file /home/<my_account>/CDS.log.3 Success
*WARNING* file /home/<my_account>/CDS.log.4 Success
*WARNING* file /home/<my_account>/CDS.log.5 Success
*WARNING* file /home/<my_account>/CDS.log.6 Success
*WARNING* file /home/<my_account>/CDS.log.7 Success
*WARNING* file /home/<my_account>/CDS.log.8 Success
*WARNING* file /home/<my_account>/CDS.log.9 Success
Failed to lock log file: /home/<my_account>/CDS.log.9

does anyone has any solutions to this? Thanks in advance.

 BTW, I've a newer version of virtuoso installed (IC6.1.4) which operates without any problem.

 

Michael

  • Andrew Beckett

    Michael,

    There have been some similar problems reported before (although none mention openLDAP). For example this solution. I found another which talked about needing to recompile openssh on the RHEL version being used.

    I'd say that the first thing you should try is using the latest IC5141 hotfix (you're using quite an old build there), and if that doesn't work, contact customer support so that we can try to resolve your machine setup so that this works.

    Regards,

    Andrew.

  • rfvlsilab

    Hello, Andrew

     Our license is sub-leased from an institution called CIC in Taiwan, so I'm unable to directly register for Cadence online support, could you please send me a copy of the solution you mentioned? My email is michael@rfvlsi.ee.nctu.edu.tw

    Thank you

  • Andrew Beckett
    The solution is talking about if you're using winbind, and it tells you how to alter things in winbind to make it work. So it's probably not relevant. It just says:

    The problem is related to the fact that winbind is being used as name service. The related part in   /etc/nsswitch.conf   is:

    passwd:     files winbind
    shadow:     files winbind
    group:      files winbind

    This also explains why the problem does not exist for local users.

    The solution is to go to the Winbind Authentication Configuration and  then in the Options tab turn on the following two flags:

    Cache User Information

    Use Shadow Passwords
  • rfvlsilab

    To workaround,

    add entries for LDAP users into /etc/passwd, and everything works fine. Make sure uid/gid/home/login shell are identical to ldap

    (do not add /etc/shadow entries)

    Michael

  • Ducatte

     Hi Michael,

     Could you please explain me better this workaround of how can I find the list of LDAP users to add in /etc/passwd ?

     Kind Regards,


     

  • pericj

    Hello,

    I've also run into this problem. This is on RHEL 7.4 and using sssd to authenticate. The getent/passwd workaround works but I wanted to know: Is there was something else I could do with respect to configuration to make this work properly?

    Thanks.

  • pyohayo
    in reply to Andrew Beckett
    Andrew Beckett said:
    Winbind Authentication Configuration

    Hello Andrew,

    How to launch Winbind Authentication Configuration ?

  • Andrew Beckett
    in reply to pyohayo
    pyohayo said:
    How to launch Winbind Authentication Configuration

    I have no idea - I've never used it. Google? (I just tried that and it seemed to show some promising hits).

    Andrew.

  • pyohayo
    in reply to Andrew Beckett

    How did you proceed when you tried ?

    I mean which command you executed ... or which tool you launched ... to see Options tab and then turned on two flags, i.e. Cache User Information and other.

    Thanks.

    Pavel.

  • Andrew Beckett
    in reply to pyohayo
    pyohayo said:
    How did you proceed when you tried ?

    What makes you think I've tried this? I just said I've never used Winbind. My earlier posts were merely providing information described in an article on the support site that I didn't write - as I said, I've no practical experience of using Winbind. So I cannot answer your question.

    Andrew

Community Guidelines

The Cadence Design Communities support Cadence users and technologists interacting to exchange ideas, news, technical information, and best practices to solve problems and get the most from Cadence technology. The community is open to everyone, and to provide the most value, we require participants to follow our Community Guidelines that facilitate a quality exchange of ideas and information. By accessing, contributing, using or downloading any materials from the site, you agree to be bound by the full Community Guidelines.