Shorewall users - May 2005 - Re: Long Shorewall Startup Times Revisited

Gregory Pleau wrote:
>>
>> The problem that you had with LDAP causing long Shorewall startup has
>> resurfaced. In your mail to me, you mentioned that you had found that
>> the issue was a permissions problem but gave no details.
>>
>> Would you be so kind as to give me the details so I can pass them on to
>> the current sufferer? I notice that you are not subscribed to the
User''s
>> list so you won''t have seen his posts.
>>
>> Thanks,
>> -Tom
>>  
>>
> Actually we didn''t fix it. We worked around it.
> 
> What we did was change the shorewall script in the /etc/init.d/ to start
> after our network and VPN came up (so LDAP was available). We also
> created a local root user on the machine and set /etc/nsswitch to use
> "files" before "ldap".
> 
Thanks, Greg

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Thanks gentlemen.  We''ll give this a try and report back.


Cheers,
   Matthew

On May 2, 2005, at 1:05 PM, Tom Eastep wrote:
> Gregory Pleau wrote:
>
>>>
>>> The problem that you had with LDAP causing long Shorewall startup
has
>>> resurfaced. In your mail to me, you mentioned that you had found
that
>>> the issue was a permissions problem but gave no details.
>>>
>>> Would you be so kind as to give me the details so I can pass them
on
>>> to
>>> the current sufferer? I notice that you are not subscribed to the 
>>> User''s
>>> list so you won''t have seen his posts.
>>>
>>> Thanks,
>>> -Tom
>>>
>>>
>> Actually we didn''t fix it. We worked around it.
>>
>> What we did was change the shorewall script in the /etc/init.d/ to 
>> start
>> after our network and VPN came up (so LDAP was available). We also
>> created a local root user on the machine and set /etc/nsswitch to use
>> "files" before "ldap".
>>
>
> Thanks, Greg
>
> -Tom
> -- 
> Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
> Shoreline,     \ http://shorewall.net
> Washington USA  \ teastep@shorewall.net
> PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key