|
This happened to me on an Vmware ESX server recentally. We had just reconfigured some of our servers to use LDAP authentication and rebooted a production system. To our suprise it did NOT come back up as we expected.. however it did hang on the message "Starting System Message bus".
What we found out: When booting the server into single user mode (runlevel 1) we found that the /var/log/messages file was complaining about not being able to get to the LDAP server for authentication.. It would retry this connection over and over and eventally would just give up and continue booting (possibly HOURS later...). The problem is that for some reason the server really couldnt find our LDAP box but it was not giving up and booting anyway for some reason. The easy way to get your box back up is to edit your /etc/openldap/ldap.conf file and find the section where you define your ldap server. e.x. URI ldap://10.10.8.209/ Comment out the above line. Save and exit the file. When you init 6 your server and bring it up normally in runlevel 3 or 5 you will notice that your server no longer hangs. I know this is not a "real" solution but this will work to get your server up and running again so that you do not have unexpected downtime while you are working on figureing out why you cant talk to the LDAP server ;) I will note that some people have reported a fix is to add the line: bind_policy soft to their ldap config file in /etc/openldap/ldap.conf I will note that the documentation states that this will try to make the LDAP connection and if it fails it will NOT go to your 2ndary LDAP if you have configured, it will rather stop trying to connect. This is not something we could have in our environment and our solution was to have an extra system acting as a backup to the main LDAP server as it is highly unlikely that both would be unreachable at the same time, We are planning on putting a 3rd LDAP backup in on a different subnet just to be safe. |