[Freeipa-users] Kerberos process coredump | authentication fails

Prashant Bapat prashant at apigee.com
Thu Jan 28 11:12:20 UTC 2016


gdb stacktrace attached.

On 28 January 2016 at 16:27, Prashant Bapat <prashant at apigee.com> wrote:

> Thanks Sumit.
>
> From the logs there is nothing unusual around the time of core dump. I
> found this one line odd though.
>
> *Jan 26 03:15:58 ipa.example.net <http://ipa.example.net>
> krb5kdc[4471](Error): worker 4473 exited with status 134*
>
>
> Let me try to get the full BT.
>
> On 28 January 2016 at 13:54, Sumit Bose <sbose at redhat.com> wrote:
>
>> On Thu, Jan 28, 2016 at 10:25:53AM +0530, Prashant Bapat wrote:
>> > Hi,
>> >
>> > We have a FreeIPA 4.1.4 setup on F21 servers. There is 1 master and 7
>> > replicas in different regions. Earlier there was only 1 replica. Since I
>> > added new replicas, on the master node, once in a while the kerberos
>> > process dumps core and everything stops working - authentication,
>> > replication etc. If we restart everything using "ipactl restart" things
>> are
>> > back to normal.
>> >
>> > Attached is the output from journalctl for kerberos.
>> >
>> > Has anyone come across this ? Are there any pointers to troubleshooting
>> > this ?
>>
>> This might be fixed recently by a patch from Simo
>> (2144b1eeb789639b8a3df287b580aeb6196188a8). But to help to better
>> identify the issue the content of the kdc logs around the time of the
>> crash might be useful. Additionally a full backtrace which you can get
>> by calling
>>
>>   coredumpclt gdb 4475
>>
>> and then
>>
>>   bt full
>>
>> bye,
>> Sumit
>>
>> >
>> > Any help is appreciated.
>> >
>> > Thanks.
>> > --Prashant
>>
>> > Jan 26 03:15:59 ipa.example.net systemd-coredump[5000]: Process 4475
>> (krb5kdc) of user 0 dumped core.
>> >
>> >                                                        Stack trace of
>> thread 4475:
>> >                                                        #0
>> 0x00007f99de8c18d7 raise (libc.so.6)
>> >                                                        #1
>> 0x00007f99de8c353a abort (libc.so.6)
>> >                                                        #2
>> 0x00007f99de8ba47d __assert_fail_base (libc.so.6)
>> >                                                        #3
>> 0x00007f99de8ba532 __assert_fail (libc.so.6)
>> >                                                        #4
>> 0x00007f99d783a78f ldap_get_values_len (libldap_r-2.4.so.2)
>> >                                                        #5
>> 0x00007f99d7c8173e ipadb_ldap_attr_to_int (ipadb.so)
>> >                                                        #6
>> 0x00007f99d7c83f9c ipadb_parse_ldap_entry (ipadb.so)
>> >                                                        #7
>> 0x00007f99d7c849ab ipadb_get_principal (ipadb.so)
>> >                                                        #8
>> 0x00007f99e0433b14 krb5_db_get_principal (libkdb5.so.7)
>> >                                                        #9
>> 0x000055768457c230 process_tgs_req (krb5kdc)
>> >                                                        #10
>> 0x0000557684579fe3 dispatch (krb5kdc)
>> >                                                        #11
>> 0x000055768458d8a0 process_packet (krb5kdc)
>> >                                                        #12
>> 0x00007f99dec4cc78 verto_fire (libverto.so.1)
>> >                                                        #13
>> 0x00007f99d6fb72a3 epoll_event_loop_once (libtevent.so.0)
>> >                                                        #14
>> 0x00007f99d6fb5787 std_event_loop_once (libtevent.so.0)
>> >                                                        #15
>> 0x00007f99d6fb1fed _tevent_loop_once (libtevent.so.0)
>> >                                                        #16
>> 0x00007f99dec4c3f7 verto_run (libverto.so.1)
>> >                                                        #17
>> 0x00005576845795ab main (krb5kdc)
>> >                                                        #18
>> 0x00007f99de8acfe0 __libc_start_main (libc.so.6)
>> >                                                        #19
>> 0x00005576845798f0 _start (krb5kdc)
>> >
>> > Jan 26 03:15:59 ipa.example.net systemd-coredump[4999]: Process 4473
>> (krb5kdc) of user 0 dumped core.
>> >
>> >                                                        Stack trace of
>> thread 4473:
>> >                                                        #0
>> 0x00007f99de8c18d7 raise (libc.so.6)
>> >                                                        #1
>> 0x00007f99de8c353a abort (libc.so.6)
>> >                                                        #2
>> 0x00007f99de8ba47d __assert_fail_base (libc.so.6)
>> >                                                        #3
>> 0x00007f99de8ba532 __assert_fail (libc.so.6)
>> >                                                        #4
>> 0x00007f99d783a78f ldap_get_values_len (libldap_r-2.4.so.2)
>> >                                                        #5
>> 0x00007f99d7c8173e ipadb_ldap_attr_to_int (ipadb.so)
>> >                                                        #6
>> 0x00007f99d7c83f9c ipadb_parse_ldap_entry (ipadb.so)
>> >                                                        #7
>> 0x00007f99d7c849ab ipadb_get_principal (ipadb.so)
>> >                                                        #8
>> 0x00007f99e0433b14 krb5_db_get_principal (libkdb5.so.7)
>> >                                                        #9
>> 0x000055768457c230 process_tgs_req (krb5kdc)
>> >                                                        #10
>> 0x0000557684579fe3 dispatch (krb5kdc)
>> >                                                        #11
>> 0x000055768458d8a0 process_packet (krb5kdc)
>> >                                                        #12
>> 0x00007f99dec4cc78 verto_fire (libverto.so.1)
>> >                                                        #13
>> 0x00007f99d6fb72a3 epoll_event_loop_once (libtevent.so.0)
>> >                                                        #14
>> 0x00007f99d6fb5787 std_event_loop_once (libtevent.so.0)
>> >                                                        #15
>> 0x00007f99d6fb1fed _tevent_loop_once (libtevent.so.0)
>> >                                                        #16
>> 0x00007f99dec4c3f7 verto_run (libverto.so.1)
>> >                                                        #17
>> 0x00005576845795ab main (krb5kdc)
>> >                                                        #18
>> 0x00007f99de8acfe0 __libc_start_main (libc.so.6)
>> >                                                        #19
>> 0x00005576845798f0 _start (krb5kdc)
>>
>> > --
>> > Manage your subscription for the Freeipa-users mailing list:
>> > https://www.redhat.com/mailman/listinfo/freeipa-users
>> > Go to http://freeipa.org for more info on the project
>>
>> --
>> Manage your subscription for the Freeipa-users mailing list:
>> https://www.redhat.com/mailman/listinfo/freeipa-users
>> Go to http://freeipa.org for more info on the project
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160128/417cb2d7/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: krb-coredump2.out
Type: application/octet-stream
Size: 9252 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160128/417cb2d7/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: krb-coredump.out
Type: application/octet-stream
Size: 9242 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160128/417cb2d7/attachment-0001.obj>


More information about the Freeipa-users mailing list