[Freeipa-users] IPA 4.2: pki-tomcatd in terrible shape

[Rob Crittenden]

Ludwig Krispenz wrote:
> The crash is an abort because of a failed assertion in  the kerberos code
> 
> Thread 1 (Thread 0x7fa7d4c88700 (LWP 3125)):
> #0  0x00007fa7e6ace5f7 in raise () from /lib64/libc.so.6
> No symbol table info available.
> #1  0x00007fa7e6acfce8 in abort () from /lib64/libc.so.6
> No symbol table info available.
> #2  0x00007fa7e6ac7566 in __assert_fail_base () from /lib64/libc.so.6
> No symbol table info available.
> #3  0x00007fa7e6ac7612 in __assert_fail () from /lib64/libc.so.6
> No symbol table info available.
> #4  0x00007fa7e8d71b83 in k5_mutex_lock.part.1 () from /lib64/libkrb5.so.3
> No symbol table info available.
> #5  0x00007fa7e8d7bda1 in k5_cc_mutex_lock () from /lib64/libkrb5.so.3
> No symbol table info available.
> #6  0x00007fa7e8d851bf in krb5_mcc_store () from /lib64/libkrb5.so.3
> No symbol table info available.
> #7  0x00007fa7e8d88070 in krb5_cc_store_cred () from /lib64/libkrb5.so.3
> No symbol table info available.
> #8  0x00007fa7e8d98be3 in complete () from /lib64/libkrb5.so.3
> No symbol table info available.
> #9  0x00007fa7e8d99ba1 in krb5_tkt_creds_step () from /lib64/libkrb5.so.3
> No symbol table info available.
> #10 0x00007fa7e8d9a637 in krb5_tkt_creds_get () from /lib64/libkrb5.so.3
> No symbol table info available.
> #11 0x00007fa7e8d9a75c in krb5_get_credentials () from /lib64/libkrb5.so.3
> No symbol table info available.
> #12 0x00007fa7e0f6736a in krb5_gss_init_sec_context_ext () from
> /lib64/libgssapi_krb5.so.2
> No symbol table info available.
> #13 0x00007fa7e0f67c97 in krb5_gss_init_sec_context () from
> /lib64/libgssapi_krb5.so.2
> No symbol table info available.
> #14 0x00007fa7e0f516ab in gss_init_sec_context () from
> /lib64/libgssapi_krb5.so.2
> No symbol table info available.
> #15 0x00007fa7e118ac44 in gssapi_client_mech_step () from
> /usr/lib64/sasl2/libgssapiv2.so
> No symbol table info available.
> #16 0x00007fa7e72847f5 in sasl_client_step () from /lib64/libsasl2.so.3
> No symbol table info available.
> #17 0x00007fa7e7284b76 in sasl_client_start () from /lib64/libsasl2.so.3
> No symbol table info available.
> #18 0x00007fa7e8475e73 in ldap_int_sasl_bind () from
> /lib64/libldap_r-2.4.so.2
> No symbol table info available.
> #19 0x00007fa7e8479492 in ldap_sasl_interactive_bind () from
> /lib64/libldap_r-2.4.so.2
> No symbol table info available.
> #20 0x00007fa7e84796bd in ldap_sasl_interactive_bind_s () from
> /lib64/libldap_r-2.4.so.2
> 
> Directory server tries to open a replication connetion usig GSSAPI. I
> don't know which assertion fails in krb, but
> - could you try with the replication agreement disabled ?
> - Rob, you have been discussing renewals of keytabs, would we have to
> renew the ds.keytab ?

This is in the context of renewing certificates, not keytabs.

I guess installing the krb5 debuginfo might give more details on where
it is crashing.

rob