[Freeipa-users] FreeIPA (directory service) Crash several times a day

Ludwig Krispenz lkrispen at redhat.com
Thu Jun 30 12:50:31 UTC 2016


On 06/30/2016 02:45 PM, Ludwig Krispenz wrote:
>
> On 06/30/2016 02:27 PM, dev at mdfive.dz wrote:
>> Hi,
>>
>> Please find strace on a core file : http://pastebin.com/v9cUzau4
> the crash is in an IPA plugin, ipa_pwd_extop,
> to get a better stack you would have to install also the debuginfo for 
> ipa-server.
but tje stack matches the error messages you have seen
[30/Jun/2016:09:35:19 +0100] ipapwd_encrypt_encode_key - [file 
encoding.c, line 171]: generating kerberos keys failed [Invalid argument]
     [30/Jun/2016:09:35:19 +0100] ipapwd_gen_hashes - [file encoding.c, 
line 225]: key encryption/encoding failed
they are from the function sin the call stack.

Looks like the user has a password with a \351 char:
cred = {bv_len = 15, bv_val = 0x7fc7880013a0 "d\351sertification"}

does the crash always happen with a bind from this user ?

> and then someone familiar with this plugin should look into it
>>
>> Regards
>>
>>
>> On 2016-06-30 12:13, Ludwig Krispenz wrote:
>>> can you get a core file ?
>>> http://www.port389.org/docs/389ds/FAQ/faq.html#debug_crashes
>>>
>>>
>>> On 06/30/2016 11:28 AM, dev at mdfive.dz wrote:
>>>> Hi,
>>>>
>>>> The Directory Services crashes several times a day. It's installed 
>>>> on CentOS 7 VM :
>>>>
>>>> Installed Packages
>>>> Name        : ipa-server
>>>> Arch        : x86_64
>>>> Version     : 4.2.0
>>>>
>>>> # ipactl status
>>>> Directory Service: STOPPED
>>>> krb5kdc Service: RUNNING
>>>> kadmin Service: RUNNING
>>>> ipa_memcached Service: RUNNING
>>>> httpd Service: RUNNING
>>>> pki-tomcatd Service: RUNNING
>>>> ipa-otpd Service: RUNNING
>>>> ipa: INFO: The ipactl command was successful
>>>>
>>>>
>>>> Before each crash, I have these messages in 
>>>> /var/log/dirsrv/slapd-XXXXX/errors :
>>>>
>>>>     [30/Jun/2016:09:35:19 +0100] ipapwd_encrypt_encode_key - [file 
>>>> encoding.c, line 171]: generating kerberos keys failed [Invalid 
>>>> argument]
>>>>     [30/Jun/2016:09:35:19 +0100] ipapwd_gen_hashes - [file 
>>>> encoding.c, line 225]: key encryption/encoding failed
>>>>
>>>>
>>>> Any help?
>>>> Best regards
>>>>
>>>
>>> -- 
>>> Red Hat GmbH, http://www.de.redhat.com/, Registered seat: Grasbrunn,
>>> Commercial register: Amtsgericht Muenchen, HRB 153243,
>>> Managing Directors: Charles Cachera, Michael Cunningham, Michael
>>> O'Neill, Eric Shander
>

-- 
Red Hat GmbH, http://www.de.redhat.com/, Registered seat: Grasbrunn,
Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Charles Cachera, Michael Cunningham, Michael O'Neill, Eric Shander




More information about the Freeipa-users mailing list