[Freeipa-users] ns-slapd segfault

[Giulio Casella]

Il 28/11/2016 19:22, Mark Reynolds ha scritto:
>
>
> On 11/28/2016 10:22 AM, Giulio Casella wrote:
>> Il 28/11/2016 15:25, Lukas Slebodnik ha scritto:
>>> On (28/11/16 12:39), Giulio Casella wrote:
>>>> Hello,
>>>>
>>>> I have a setup with two ipa server in replica, based on CentOS 7.
>>>> On one server (since a couple of days) ipa cannot start, the failing
>>>> service
>>>> is dirsrv@<REALM-NAME>.service.
>>>> In journal I have:
>>>>
>>>> ns-slapd[4617]: segfault at 7fb53b1ce515 ip 00007fb50126e1a6sp
>>>> 00007ffc0b80d6c8 error 4 in libc-2.17.so[7fb501124000+1b7000]
>>>>
>>>> (just after a lot of SSL alerts complaining about some enabled
>>>> cypher suite,
>>>> but I cannot say if this could be related).
>>>>
>>>> I'm using ipa 4.2.0, and 389-ds-base 1.3.4.
>>>>
>>> It would be good to know the exact version.
>>> rpm -q 389-ds-base
>>
>> Installed version is:
>>
>> 389-ds-base-1.3.4.0-33.el7_2.x86_64
>>
>>>
>>> Please provide backtrace or coredump; other developers will know
>>> wheter it's know bug or a new bug.
>>
>> Ok, you can find attached full stacktrace.
> It's crashing trying to read updates from the replication changelog.
>
> Are you using attribute encryption?
> Any chance you have a way to reproduce this?
>
> Since this is happening on only one server then I think recreating the
> replication changelog will "fix" the issue.  Just re-initializing that
> replica should do it.  Does this server start - so it can be reinited?
> If not, you need to manually remove the changelog and start the
> directory server, and reinit it.  Or perform a manual ldif
> initialization.  (I can help with either one if needed)
>

No, directory server can't start, so I think I have to manually remove 
the changelog.
Any help is obviously welcome.
BTW: Do you confirm I won't lose data on second (working) server doing 
removal of changelog?

Thanks in advance,
gc