[SSSD] SIGSEGV in sssd_be using ldap_init_fd

Jan Zelený jzeleny at redhat.com
Fri Jul 29 12:38:30 UTC 2011


> Jan Zelený wrote:
> > I suspect this to be the source of your problem. This is really archaic
> > version of openldap when used with SSSD. There have been huge changes in
> > libldap, more specifically it stopped using openssl as its backend and it
> > is now utilizing Mozilla NSS instead. Also many other TLS-related fixes
> > have been made in recent versions.
> > 
> > Please try to use newer libldap, I believe, most recent in RHEL is
> > 2.4.23.
> 
> Right, thanks for this.  I'm just rebuilding that now and will let you
> know the results.  CentOS are rather behind at the moment, and I hadn't
> caught the requirement for a more recent OpenLDAP from the Fedora src.rpm.
> 
> > Just to be sure, you can run rpm -q --requires openldap and see if
> > openssl is there somewhere (there should be none).
> 
> libssl.so.10()(64bit)
> libcrypto.so.10()(64bit)
> 
> So I'm guessing that's wrong and old then.
> 
> jh

Yes, in recent versions you should have something like

libnss3.so()(64bit)

Jan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20110729/d3fb69d6/attachment.sig>


More information about the sssd-devel mailing list