[Freeipa-users] FreeOTP

Thu Jun 9 08:46:45 UTC 2016

On Thu, Jun 09, 2016 at 08:16:13AM +0200, Winfried de Heiden wrote:
> Hi all,
> 
> I can install libvert-libev but removing libverto-tevent will remove 123
> dependencies also. (wget, tomcat and much more...)
> 
> Hence, I installed libverto-libev, but dit not remove libverto-tevent to give
> it a try. After ipactl restart still the same problem:

fyi, I think I can reproduce the issue on 32bit Fedora. I tried
libverto-libev as well but I removed libverto-tevent after installing
libverto-libev with 'rpm -e --nodeps ....' to make sure libverto has no
other chance.

So it looks a bit like a libverto 32bit issue. I used
libverto-0.2.6-4.fc22. Since I knew that is was working before on 32bits
I tried libverto-0.2.5 and libverto-0.2.4 as well with no lock.

Nathaniel, do you have any suggestions what to check with gdb?

bye,
Sumit

> 
> root at ipa ~]# systemctl --failed; journalctl -l -u ipa-otpd at 5-2998-0.service -xe
>   UNIT                      LOAD   ACTIVE SUB    DESCRIPTION
> * ipa-otpd at 5-2998-0.service loaded failed failed ipa-otpd service (PID 2998/UID
> 0)
> 
> LOAD   = Reflects whether the unit definition was properly loaded.
> ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
> SUB    = The low-level unit activation state, values depend on unit type.
> 
> 1 loaded units listed. Pass --all to see loaded but inactive units, too.
> ~Unit ipa-otpd at 5-2998-0.service has begun starting up.
> Jun 09 08:12:40 ipa.blabla.bla ipa-otpd[3558]: LDAP: ldapi://
> %2fvar%2frun%2fslapd-BLABLA-BLA.socket
> Jun 09 08:12:41 ipa.blabla.bla ipa-otpd[3558]: otpuser at BLABLA.BLA: request
> received
> Jun 09 08:12:41 ipa.blabla.bla ipa-otpd[3558]: otpuser at BLABLA.BLA: user query
> start
> Jun 09 08:12:41 ipa.blabla.bla ipa-otpd[3558]: otpuser at BLABLA.BLA: user query
> end: uid=otpuser,cn=users,cn=accounts,dc=blabla,dc=bla
> Jun 09 08:12:41 ipa.blabla.bla ipa-otpd[3558]: otpuser at BLABLA.BLA: bind start:
> uid=otpuser,cn=users,cn=accounts,dc=blabla,dc=bla
> Jun 09 08:12:41 ipa.blabla.bla ipa-otpd[3558]: otpuser at BLABLA.BLA: bind end:
> success
> Jun 09 08:12:41 ipa.blabla.bla ipa-otpd[3558]: otpuser at BLABLA.BLA: response
> sent: Access-Accept
> Jun 09 08:12:41 ipa.blabla.bla ipa-otpd[3558]: stdio.c:073: Connection reset by
> peer: Error receiving packet
> Jun 09 08:12:41 ipa.blabla.bla systemd[1]: ipa-otpd at 5-2998-0.service: Main
> process exited, code=exited, status=1/FAILURE
> Jun 09 08:12:41 ipa.blabla.bla systemd[1]: ipa-otpd at 5-2998-0.service: Unit
> entered failed state.
> Jun 09 08:12:41 ipa.blabla.bla systemd[1]: ipa-otpd at 5-2998-0.service: Failed
> with result 'exit-code'.
> 
> :(
> 
> 
> Winny
> 
> 
> 
> 
> Op 08-06-16 om 19:15 schreef Nathaniel McCallum:
> 
>     Can you please try:
>       # dnf install libverto-libev
>       # dnf remove libverto-tevent
>       # ipactl restart
> 
>     On Wed, 2016-06-08 at 18:30 +0200, Winfried de Heiden wrote:
> 
>         Well, here your are:
>         rpm -qa 'libverto*' 'krb5*'
>         krb5-pkinit-1.14.1-6.fc23.armv7hl
>         libverto-tevent-0.2.6-5.fc23.armv7hl
>         krb5-libs-1.14.1-6.fc23.armv7hl
>         krb5-workstation-1.14.1-6.fc23.armv7hl
>         libverto-0.2.6-5.fc23.armv7hl
>         krb5-server-1.14.1-6.fc23.armv7hlfedora
>         I'm wondering if this is a Fedora ARM issue, I can't reproduce it on
>         Fedora x86_64...
> 
>         Winny
> 
> 
>         Op 08-06-16 om 15:53 schreef Nathaniel McCallum:
> 
>             No, we need to know what libverto *backend* you are using. Please
>             provide the output from this command: rpm -qa 'libverto*' 'krb5*'
> 
>             On Wed, 2016-06-08 at 08:34 +0200, Winfried de Heiden wrote:
> 
>                 Hi all,
> 
> 
>                 Well, the libverto is there some time allready (yep, it's running
>                 on
>                 a Bananapi!), doesn't feel like a recent update, so a 
> 
> 
>                 Name        : libverto
>                 Version     : 0.2.6
>                 Release     : 5.fc23
>                 Architecture: armv7hl
>                 Install Date: Thu Jan  1 01:08:24 1970
>                 Group       : Unspecified
>                 Size        : 21896
>                 License     : MIT
>                 Signature   : RSA/SHA256, Sun Jun 21 06:24:46 2015, Key ID
>                 32474cf834ec9cba
>                 Source RPM  : libverto-0.2.6-5.fc23.src.rpm
>                 Build Date  : Wed Jun 17 20:37:05 2015
>                 Build Host  : arm04-builder19.arm.fedoraproject.org
> 
>                 No, no previous build available...
> 
>                 [root at ipa boot]# dnf downgrade libverto
>                 Last metadata expiration check: 0:10:21 ago on Wed Jun  8
>                 08:19:53
>                 2016.
>                 Package libverto of lowest version already installed, cannot
>                 downgrade it.
>                 Error: Nothing to do.
> 
> 
>                 My first guess is that you are hitting this bug: https://github.c
>                 om/k
>                 rb5/krb5/commit/051a31aac553defb2ef0ed4354b799090899904e
> 
>                 What to do about it...? 
> 
>          
> 
> 

> -- 
> Manage your subscription for the Freeipa-users mailing list:
> https://www.redhat.com/mailman/listinfo/freeipa-users
> Go to http://freeipa.org for more info on the project