Bug 1802258

Sumit, How to verify this bz?

Hi,

this issue was found while running adcli/Regression/bz1575554-segfaults-udp-389-is-blocked. If you run this test with adcli-0.8.1-13.el7 or adcli-0.8.1-12.el7 you should see the crash while adcli-0.8.1-14.el7 should fix it.

bye,
Sumit

Tested with beaker run https://beaker.engineering.redhat.com/jobs/4278507


::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::   TEST PROTOCOL
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

    Test run ID   : 110703038
    Package       : adcli
    Installed     : adcli-0.8.1-14.el7.ppc64le
    beakerlib RPM : beakerlib-1.18-7.el7bkr.noarch
    bl-redhat RPM : beakerlib-redhat-1-32.el7bkr.noarch
    Test name     : /CoreOS/adcli/Regression/bz1575554-segfaults-udp-389-is-blocked
    Test version  : 1.0-0
    Test built    : 2020-01-23 07:24:45 EST
    Test started  : 2020-05-26 04:41:44 EDT
    Test finished : 2020-05-26 04:42:16 EDT (still running)
    Test duration : 32 seconds
    Distro        : Red Hat Enterprise Linux Server release 7.9 Beta (Maipo)
    Hostname      : ibm-ps822-1-vios-lp3.gsslab.rdu2.redhat.com
    Architecture  : ppc64le
    CPUs          : 0 x unknown
    RAM size      : 1607 MB
    HDD size      : 17.97 GB

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::   Test description
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

PURPOSE of /CoreOS/adcli/Regression/bz1575554-segfaults-udp-389-is-blocked
Description: Test for BZ#1575554 (Segfaults during AD join if udp 389 is blocked)
Author: Petr Cech <pcech>
Bug summary: Segfaults during AD join if udp 389 is blocked
Bugzilla link: https://bugzilla.redhat.com/show_bug.cgi?id=1575554


::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::   Setup
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [ 04:41:44 ] :: [   LOG    ] :: Package adcli is present
:: [ 04:41:44 ] :: [   LOG    ] :: Package versions:
:: [ 04:41:44 ] :: [   LOG    ] ::   adcli-0.8.1-14.el7.ppc64le
:: [ 04:41:44 ] :: [   PASS   ] :: Creating tmp directory (Expected 0, got 0)
:: [ 04:41:44 ] :: [   PASS   ] :: Command 'pushd /tmp/tmp.MiOA1QUdUz' (Expected 0, got 0)
:: [ 04:41:44 ] :: [   INFO   ] :: rlImport: Found 'realmd/basic', version '1.0-59' in /mnt/tests
:: [ 04:41:44 ] :: [   INFO   ] :: rlImport: Will try to import realmd/basic from /mnt/tests/CoreOS/realmd/Library/basic/lib.sh
:: [ 04:41:44 ] :: [   PASS   ] :: Command 'rlImport realmd/basic' (Expected 0, got 0)
:: [ 04:41:44 ] :: [   INFO   ] :: using '/var/tmp/beakerlib-110703038/backup' as backup destination
:: [ 04:41:44 ] :: [   PASS   ] :: Command 'rlFileBackup --clean /etc/resolv.conf /etc/krb5.keytab' (Expected 0, got 0)
:: [ 04:41:52 ] :: [   PASS   ] :: Command 'ntpdate 10.37.152.14' (Expected 0, got 0)
:: [ 04:41:52 ] :: [   PASS   ] :: Command 'hostnamectl set-hostname ibm-ps822-1-vio.ad.baseos.qe' (Expected 0, got 0)
:: [ 04:41:53 ] :: [   PASS   ] :: Command 'ldapsearch -x -LLL -H ldap://10.37.152.14 -D 'Amy-admin.qe' -w 'Pass2012!' -b CN=ibm-ps822-1-vio,CN=Computers,dc=ad,dc=baseos,dc=qe -s sub '*'' (Expected 0-255, got 32)
:: [ 04:41:53 ] :: [   LOG    ] :: It should be safe to join this machine to AD
:: [ 04:41:54 ] :: [   PASS   ] :: Command 'ldapsearch -x -LLL -H ldap://10.37.152.14 -D 'Amy-admin.qe' -w 'Pass2012!' -b CN=ibm-ps822-1-vio,CN=Computers,dc=ad,dc=baseos,dc=qe -s sub '*'' (Expected 0-255, got 32)
:: [ 04:41:54 ] :: [   PASS   ] :: Command 'echo nameserver\ 10.37.152.14 > /etc/resolv.conf' (Expected 0, got 0)
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::   Duration: 10s
::   Assertions: 9 good, 0 bad
::   RESULT: PASS (Setup)


::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::   adcli join
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [ 04:41:56 ] :: [   LOG    ] :: Add rule for dropping port UDP 389
:: [ 04:41:56 ] :: [   PASS   ] :: Command 'iptables -A OUTPUT -p udp --destination-port 389 -j DROP' (Expected 0, got 0)
:: [ 04:42:04 ] :: [   PASS   ] :: Join computer to AD (Expected 0,134, got 0)
:: [ 04:42:04 ] :: [   PASS   ] :: File '/var/tmp/rlRun_LOG.7G90ZGF6' should not contain 'Segmentation fault' 
:: [ 04:42:04 ] :: [   PASS   ] :: rm -f rlRun_LOG (Expected 0, got 0)
:: [ 04:42:04 ] :: [   LOG    ] :: Remove rule for dropping port UDP 389
:: [ 04:42:04 ] :: [   PASS   ] :: Command 'iptables -D OUTPUT -p udp --destination-port 389 -j DROP' (Expected 0, got 0)
:: [ 04:42:04 ] :: [   LOG    ] :: Clean up
:: [ 04:42:04 ] :: [   PASS   ] :: klist -kte (Expected 0, got 0)
:: [ 04:42:08 ] :: [   PASS   ] :: Command 'echo -n Pass2012! | adcli delete-computer --verbose --domain ad.baseos.qe --login-user Amy-admin --stdin-password' (Expected 0, got 0)
:: [ 04:42:08 ] :: [   PASS   ] :: Command 'kdestroy -A' (Expected 0, got 0)
:: [ 04:42:08 ] :: [   PASS   ] :: Command 'rm -f /etc/krb5.keytab' (Expected 0, got 0)
:: [ 04:42:08 ] :: [   PASS   ] :: rm -f rlRun_LOG (Expected 0, got 0)
:: [ 04:42:08 ] :: [   LOG    ] :: Computer was removed from AD domain
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::   Duration: 12s
::   Assertions: 10 good, 0 bad
::   RESULT: PASS (adcli join)


::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::   Cleanup
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [ 04:42:10 ] :: [   LOG    ] :: Clean up
:: [ 04:42:10 ] :: [   LOG    ] :: File [/etc/krb5.keytab] doesn't exist, so computer isn't connected to the AD domain
:: [ 04:42:10 ] :: [   PASS   ] :: Command 'hostnamectl set-hostname ibm-ps822-1-vios-lp3.gsslab.rdu2.redhat.com' (Expected 0, got 0)
:: [ 04:42:11 ] :: [   PASS   ] :: Command 'rlFileRestore' (Expected 0, got 0)
:: [ 04:42:12 ] :: [   PASS   ] :: Command 'popd' (Expected 0, got 0)
:: [ 04:42:12 ] :: [   PASS   ] :: Removing tmp directory (Expected 0, got 0)
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::   Duration: 2s
::   Assertions: 4 good, 0 bad
::   RESULT: PASS (Cleanup)


::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::   /CoreOS/adcli/Regression/bz1575554-segfaults-udp-389-is-blocked
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

Uploading journal.xml .done
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
::   Duration: 32s
::   Phases: 3 good, 0 bad
::   OVERALL RESULT: PASS (/CoreOS/adcli/Regression/bz1575554-segfaults-udp-389-is-blocked)



Marking verified.

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (adcli bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:3985