[SSSD-users] sssd auth issue on centos 5.10
Daniel Jung
mimianddaniel at gmail.com
Wed Aug 13 01:36:05 UTC 2014
Installed openldap 2.4.23 manually; There are quite a few packages
depending on the libldap and liblber which i had to force to reinstall.
It doesnt sigsegv now but i am getting
Wed Aug 13 03:09:37:761645 2014) [sssd[be[LDAP]]] [sdap_connect_done]
(0x0080): START TLS result: Success(0), (null)
(Wed Aug 13 03:09:37:761687 2014) [sssd[be[LDAP]]] [sdap_connect_done]
(0x0080): ldap_install_tls failed: [Connect error] [unknown error]
And my ldapsearch -ZZ -x doesnt work anymore. Obviously this is bad
libldap?
So using 1.5.1, my ldapsearch -ZZ works fine but sssd_be sigsegv when
trying to use pam with password. And using 1.9.6 with openldap-2.4 lib,
sssd with pam + password doesnt work plus and it doesnt work with
ldapsearch ( this probably has to do with compat+ldap ?)
Anyone out there using sssd in centos 5 with PAM + password auth?
On Tue, Aug 12, 2014 at 12:51 PM, Daniel Jung <mimianddaniel at gmail.com>
wrote:
> No issue with running getent or ldapsearch to query ldap servers
>
> here are the info from the core
> bt
> #0 0x00002abcafe5b748 in ldap_int_tls_start () from
> /usr/lib64/libldap-2.4.so.2
> #1 0x00002abcb46b53fc in sdap_connect_done (op=<value optimized out>,
> reply=<value optimized out>, error=0, pvt=<value optimized out>) at
> src/providers/ldap/sdap_async_connection.c:395
> #2 0x00002abcb4686ded in sdap_process_message (ev=<value optimized out>,
> pvt=<value optimized out>) at src/providers/ldap/sdap_async.c:366
> #3 sdap_process_result (ev=<value optimized out>, pvt=<value optimized
> out>) at src/providers/ldap/sdap_async.c:209
> #4 0x0000003501c08c26 in ?? () from /usr/lib64/libtevent.so.0
> #5 0x0000003501c06e96 in ?? () from /usr/lib64/libtevent.so.0
> #6 0x0000003501c0346d in _tevent_loop_once () from
> /usr/lib64/libtevent.so.0
> #7 0x0000003501c034db in tevent_common_loop_wait () from
> /usr/lib64/libtevent.so.0
> #8 0x0000003501c06e06 in ?? () from /usr/lib64/libtevent.so.0
> #9 0x0000000000465d83 in server_loop (main_ctx=0xd13be00) at
> src/util/server.c:601
> #10 0x0000000000419f1b in main (argc=<value optimized out>,
> argv=0x7ffff4995518) at src/providers/data_provider_be.c:2755
>
>
> (gdb) list
> 2670 return EOK;
> 2671
> 2672 fail:
> 2673 talloc_free(ctx);
> 2674 return ret;
> 2675 }
> 2676
> 2677 #ifndef UNIT_TESTING
> 2678 int main(int argc, const char *argv[])
> 2679 {
>
> frame 1
> gdb) list
> 390 tevent_req_done(req);
> 391 return;
> 392 }
> 393
> 394 /* FIXME: take care that ldap_install_tls might block */
> 395 ret = ldap_install_tls(state->sh->ldap);
> 396 if (ret != LDAP_SUCCESS) {
> 397
> 398 optret = sss_ldap_get_diagnostic_msg(state, state->sh->ldap,
> 399 &tlserr);
>
> rpm -qi openldap24-2.4.19-15.el5.2 | head
> Name : openldap24 Relocations: (not relocatable)
> Version : 2.4.19 Vendor: (none)
> Release : 15.el5.2 Build Date: Tue 29 Oct 2013
> 11:31:42 PM CET
>
> I found
> https://lists.fedorahosted.org/pipermail/sssd-devel/2011-July/006625.html
> which seems to be similar to the problem i am having?
>
> Sadly, for co5, thats the latest avail, I will build latest and see if
> that fixes the problem with it.
>
> Cheers
>
>
>
>
>
>
> On Tue, Aug 12, 2014 at 12:04 AM, Jakub Hrozek <jhrozek at redhat.com> wrote:
>
>> On Mon, Aug 11, 2014 at 05:12:26PM -0700, Daniel Jung wrote:
>> > Dont see much in the core either.
>> >
>> > Core was generated by `/usr/libexec/sssd/sssd_be -d 0 --domain LDAP'.
>> > Program terminated with signal 11, Segmentation fault.
>> > #0 0x0000003502030748 in ?? ()
>> > (gdb) bt
>> > #0 0x0000003502030748 in ?? ()
>> > #1 0x00000000ffffe4a0 in ?? ()
>> > #2 0x0000000000676f20 in ?? ()
>> > #3 0x00007fffffffe580 in ?? ()
>> > #4 0x00007fffffffe4f0 in ?? ()
>> > #5 0x00007fffffffe618 in ?? ()
>> > #6 0x0000000000000007 in ?? ()
>> > #7 0x0000000000063358 in ?? ()
>> > #8 0x0000000c000000d0 in ?? ()
>> > #9 0x0000000000000000 in ?? ()
>>
>> Looks like you're missing the debuginfo packages. Can you run:
>>
>> sudo rpm -ivh
>>
>> http://copr-be.cloud.fedoraproject.org/results/sgallagh/sssd-1.9-rhel5/epel-5-x86_64/sssd-1.9.6-0.fc20/sssd-debuginfo-1.9.6-0.el5.x86_64.rpm
>>
>> or just:
>> sudo debuginfo-install sssd
>>
>> the latter is going to bring in more *-debuginfo packages but also
>> ensure debuginfo symbols for dependencies are available.
>> _______________________________________________
>> sssd-users mailing list
>> sssd-users at lists.fedorahosted.org
>> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20140812/1b748131/attachment-0001.html>
More information about the sssd-users
mailing list