Bug 50395 - getpwuid() sometimes fails with nscd - Permission denied for machine.secret?
Summary: getpwuid() sometimes fails with nscd - Permission denied for machine.secret?
Status: RESOLVED WONTFIX
Alias: None
Product: UCS
Classification: Unclassified
Component: nscd
Version: UCS 4.4
Hardware: Other Linux
: P5 normal
Target Milestone: ---
Assignee: UCS maintainers
QA Contact: UCS maintainers
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-10-21 11:54 CEST by Christian Völker
Modified: 2024-06-27 12:10 CEST (History)
3 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?: 1: Will affect a very few installed domains
How will those affected feel about the bug?: 3: A User would likely not purchase the product
User Pain: 0.051
Enterprise Customer affected?: Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2019062821000381
Bug group (optional):
Customer ID: 00026
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Christian Völker univentionstaff 2019-10-21 11:54:49 CEST 
Customer uses a php function to get the home-path for a user:

$aUser = (posix_getpwuid(posix_geteuid()));

Sometimes it seems nscd is very busy and therefore does not reply with the needed information of the user:
posix_getpwuid()

PHP-Fehlermeldung:
EUID: 8869 User: 1 LAST POSIX ERROR: 13: Permission denied
Comment 1 Philipp Hahn univentionstaff 2019-10-21 17:01:10 CEST 
We use `nscd` by default as /etc/machine.secret is not readable by world.

The "work-around" to make the credentials readable by anyone only sometimes worked.
Comment 2 Arvid Requate univentionstaff 2019-11-05 22:24:30 CET 
Quick ideas: https://docs.software-univention.de/performance-guide-4.4.html#nscd

ucr search nscd/passwd* nscd/threads
Comment 3 Jan-Luca Kiok univentionstaff 2024-06-27 12:10:13 CEST 
This issue has been filed against UCS 4.4.

UCS 4.4 is out of general maintenance and components may have vastly changed in later releases. Thus, this issue is now being closed.

If this issue still occurs in newer versions, please use "Clone this bug" or reopen this issue. In this case please provide detailed information on how this issue is affecting you.