I don't know if it is related to fba5006123579909681ca10fdf176d4c8ad4e2f2, but localuser and maintainers now fail on tools-mail, thus stopping all mail from being delivered:
root@tools-mail:~# localuser scfc id: : No such user root@tools-mail:~# maintainers grantsbot ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1) root@tools-mail:~# maintainers tools.grantsbot ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1) root@tools-mail:~#
localuser (for example) uses the code:
BIND="-D $(sed -ne '/^binddn\s/{;s/.*\s\(.*\)/\1/;p;}' /etc/ldap.conf)"
BIND="$BIND -w $(sed -ne '/^bindpw\s/{;s/.*\s\(.*\)/\1/;p;}' /etc/ldap.conf)"
echo $(
/usr/bin/ldapsearch -LLL $BIND -b "uid=$2,ou=people,dc=wikimedia,dc=org" mail |
/bin/sed -ne '/^mail: \(.*\)/{;s//\1,/;p;}'
) | sed -e 's/,\s*$//'This executes the command line:
/usr/bin/ldapsearch -LLL -D cn=proxyagent,ou=profile,dc=wikimedia,dc=org -w $wellknownpassword -b uid=scfc,ou=people,dc=wikimedia,dc=org mail
so the parsing of the credentials doesn't seem to be the problem, but some issue on the server side?