[SSSD-users] sssd auth issue on centos 5.10

Daniel Jung mimianddaniel at gmail.com
Wed Aug 13 01:36:05 UTC 2014


Installed openldap 2.4.23 manually;  There are quite a few packages
depending on the libldap and liblber which i had to force to reinstall.
It doesnt sigsegv now but i am getting
Wed Aug 13 03:09:37:761645 2014) [sssd[be[LDAP]]] [sdap_connect_done]
(0x0080): START TLS result: Success(0), (null)
(Wed Aug 13 03:09:37:761687 2014) [sssd[be[LDAP]]] [sdap_connect_done]
(0x0080): ldap_install_tls failed: [Connect error] [unknown error]

And my ldapsearch -ZZ -x doesnt work anymore. Obviously this is bad
libldap?

So using 1.5.1, my ldapsearch -ZZ works fine but sssd_be sigsegv when
trying to use pam with password. And using 1.9.6 with openldap-2.4 lib,
sssd with pam + password doesnt work plus and it doesnt work with
ldapsearch ( this probably has to do with compat+ldap ?)

Anyone out there using sssd in centos 5 with PAM + password auth?


On Tue, Aug 12, 2014 at 12:51 PM, Daniel Jung <mimianddaniel at gmail.com>
wrote:

> No issue with running getent or ldapsearch to query ldap servers
>
> here are the info from the core
> bt
> #0  0x00002abcafe5b748 in ldap_int_tls_start () from
> /usr/lib64/libldap-2.4.so.2
> #1  0x00002abcb46b53fc in sdap_connect_done (op=<value optimized out>,
> reply=<value optimized out>, error=0, pvt=<value optimized out>) at
> src/providers/ldap/sdap_async_connection.c:395
> #2  0x00002abcb4686ded in sdap_process_message (ev=<value optimized out>,
> pvt=<value optimized out>) at src/providers/ldap/sdap_async.c:366
> #3  sdap_process_result (ev=<value optimized out>, pvt=<value optimized
> out>) at src/providers/ldap/sdap_async.c:209
> #4  0x0000003501c08c26 in ?? () from /usr/lib64/libtevent.so.0
> #5  0x0000003501c06e96 in ?? () from /usr/lib64/libtevent.so.0
> #6  0x0000003501c0346d in _tevent_loop_once () from
> /usr/lib64/libtevent.so.0
> #7  0x0000003501c034db in tevent_common_loop_wait () from
> /usr/lib64/libtevent.so.0
> #8  0x0000003501c06e06 in ?? () from /usr/lib64/libtevent.so.0
> #9  0x0000000000465d83 in server_loop (main_ctx=0xd13be00) at
> src/util/server.c:601
> #10 0x0000000000419f1b in main (argc=<value optimized out>,
> argv=0x7ffff4995518) at src/providers/data_provider_be.c:2755
>
>
> (gdb) list
> 2670    return EOK;
> 2671
> 2672 fail:
> 2673    talloc_free(ctx);
> 2674    return ret;
> 2675 }
> 2676
> 2677 #ifndef UNIT_TESTING
> 2678 int main(int argc, const char *argv[])
> 2679 {
>
> frame 1
> gdb) list
> 390        tevent_req_done(req);
> 391        return;
> 392    }
> 393
> 394 /* FIXME: take care that ldap_install_tls might block */
> 395    ret = ldap_install_tls(state->sh->ldap);
> 396    if (ret != LDAP_SUCCESS) {
> 397
> 398        optret = sss_ldap_get_diagnostic_msg(state, state->sh->ldap,
> 399                                             &tlserr);
>
> rpm -qi openldap24-2.4.19-15.el5.2 | head
> Name        : openldap24                   Relocations: (not relocatable)
> Version     : 2.4.19                            Vendor: (none)
> Release     : 15.el5.2                      Build Date: Tue 29 Oct 2013
> 11:31:42 PM CET
>
> I found
> https://lists.fedorahosted.org/pipermail/sssd-devel/2011-July/006625.html
> which seems to be similar to the problem i am having?
>
> Sadly, for co5, thats the latest avail, I will build latest and see if
> that fixes the problem with it.
>
> Cheers
>
>
>
>
>
>
> On Tue, Aug 12, 2014 at 12:04 AM, Jakub Hrozek <jhrozek at redhat.com> wrote:
>
>> On Mon, Aug 11, 2014 at 05:12:26PM -0700, Daniel Jung wrote:
>> > Dont see much in the core either.
>> >
>> > Core was generated by `/usr/libexec/sssd/sssd_be -d 0 --domain LDAP'.
>> > Program terminated with signal 11, Segmentation fault.
>> > #0  0x0000003502030748 in ?? ()
>> > (gdb) bt
>> > #0  0x0000003502030748 in ?? ()
>> > #1  0x00000000ffffe4a0 in ?? ()
>> > #2  0x0000000000676f20 in ?? ()
>> > #3  0x00007fffffffe580 in ?? ()
>> > #4  0x00007fffffffe4f0 in ?? ()
>> > #5  0x00007fffffffe618 in ?? ()
>> > #6  0x0000000000000007 in ?? ()
>> > #7  0x0000000000063358 in ?? ()
>> > #8  0x0000000c000000d0 in ?? ()
>> > #9  0x0000000000000000 in ?? ()
>>
>> Looks like you're missing the debuginfo packages. Can you run:
>>
>> sudo rpm -ivh
>>
>> http://copr-be.cloud.fedoraproject.org/results/sgallagh/sssd-1.9-rhel5/epel-5-x86_64/sssd-1.9.6-0.fc20/sssd-debuginfo-1.9.6-0.el5.x86_64.rpm
>>
>> or just:
>> sudo debuginfo-install sssd
>>
>> the latter is going to bring in more *-debuginfo packages but also
>> ensure debuginfo symbols for dependencies are available.
>> _______________________________________________
>> sssd-users mailing list
>> sssd-users at lists.fedorahosted.org
>> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-users/attachments/20140812/1b748131/attachment-0001.html>


More information about the sssd-users mailing list