Unable to login as root when no network is available

This document (3597546) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 10 Support Pack 1

Situation

Default login method is LDAP
In /etc/pam.d/login you have an entry: session required pam_resmgr.so

Unable to login as root when network is not available
Login of root receives a timeout after 60 seconds

Resolution

This is a problem with resmgr searching for groupmembership for in the LDAP repository. The default timeout is 60 seconds (defined in /etc/ldap.conf).

This issue has been resolved for SLES10 SP1.

Additional Information

To prevent other problems with login of root (e.g. login takes a long time), it is recommended to change the /etc/ldap.conf to exclude group-membership searches via LDAP for root. This can be achieved by entering the following linein /etc/ldap.conf:
nss_initgroups_ignoreusers root

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.