Bug 1803786

Summary: ipa krb5kdc db: krb5kdc coredump
Product: Red Hat Enterprise Linux 8 Reporter: Florence Blanc-Renaud <frenaud>
Component: ipaAssignee: Thomas Woerner <twoerner>
Status: CLOSED ERRATA QA Contact: ipa-qe <ipa-qe>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 8.2CC: abokovoy, amore, fcami, ksiddiqu, pasik, rcritten, tscherf
Target Milestone: rc   
Target Release: 8.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1803924 (view as bug list) Environment:
Last Closed: 2020-04-28 15:44:54 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1803924, 1803925    

Description Florence Blanc-Renaud 2020-02-17 12:58:04 UTC
Cloned from upstream: https://pagure.io/freeipa/issue/8200

The nightly test `fedora-rawhide/test_forced_client_enrolment ` failed because of krb5kdc coredump. See PR #[140](https://github.com/freeipa-pr-ci2/freeipa/pull/140) with the following [logs](http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/14c9061a-50a7-11ea-942e-fa163e37ad70/).

The stack trace can be found in the master's [journal](http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/14c9061a-50a7-11ea-942e-fa163e37ad70/test_integration-test_forced_client_reenrollment.py-TestForcedClientReenrollment-test_try_to_reenroll_with_incorrect_keytab/master.ipa.test/journal.gz):
```
Feb 16 11:18:02 master.ipa.test systemd[1]: krb5kdc.service: Main process exited, code=dumped, status=11/SEGV
Feb 16 11:18:02 master.ipa.test systemd[1]: krb5kdc.service: Failed with result 'core-dump'.
Feb 16 11:18:02 master.ipa.test audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=krb5kdc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
Feb 16 11:18:02 master.ipa.test systemd-coredump[31826]: Process 29572 (krb5kdc) of user 0 dumped core.
                                                         
                                                         Stack trace of thread 29572:
                                                         #0  0x00007f77dad466e0 krb5_dbe_lookup_tl_data (libkdb5.so.10 + 0x86e0)
                                                         #1  0x00007f77dad470a4 krb5_dbe_get_string (libkdb5.so.10 + 0x90a4)
                                                         #2  0x00007f77da2d4b12 ipadb_get_ldap_mod_auth_ind (ipadb.so + 0x9b12)
                                                         #3  0x00007f77da2d720d ipadb_modify_principal (ipadb.so + 0xc20d)
                                                         #4  0x00007f77da2dcc20 ipadb_audit_as_req (ipadb.so + 0x11c20)
                                                         #5  0x000055a586330f26 log_as_req (krb5kdc + 0x1bf26)
                                                         #6  0x000055a58631f077 finish_process_as_req (krb5kdc + 0xa077)
                                                         #7  0x000055a58631fcf0 process_as_req (krb5kdc + 0xacf0)
                                                         #8  0x000055a58631eb99 dispatch (krb5kdc + 0x9b99)
                                                         #9  0x000055a586334336 process_tcp_connection_read (krb5kdc + 0x1f336)
                                                         #10 0x00007f77dabf871c verto_fire (libverto.so.1 + 0x471c)
                                                         #11 0x00007f77d6bba173 ev_invoke_pending (libev.so.4 + 0x6173)
                                                         #12 0x00007f77d6bbe21b ev_run (libev.so.4 + 0xa21b)
                                                         #13 0x000055a58631d85b main (krb5kdc + 0x885b)
                                                         #14 0x00007f77daa51042 __libc_start_main (libc.so.6 + 0x27042)
                                                         #15 0x000055a58631dcde _start (krb5kdc + 0x8cde)
Feb 16 11:18:02 master.ipa.test systemd[1]: systemd-coredump: Succeeded.
Feb 16 11:18:02 master.ipa.test audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-coredump@0-31825-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
```

The last command before the failure was `ipa host-del client0.ipa.test`, then `unshare --net ipa-client-install --uninstall -U`.

Comment 6 anuja 2020-02-24 12:48:22 UTC
Verified using:
name: ipa-server
release: 6.module+el8.2.0+5773+68ace8c5
source: rpm
version: 4.8.4
========================================================================================================================
As per comment #1 Verified using sanity verification using upstream : test_forced_client_reenrollment.py
========================================================================================================================
uname: posix.uname_result(sysname='Linux', nodename='runner.testrelm.test', release='4.18.0-180.el8.x86_64', version='#1 SMP Wed Feb 19 15:54:23 UTC 2020', machine='x86_64')
euid: 0, egid: 0
working dir: /home/cloud-user
sys.version: 3.6.8 (default, Dec  5 2019, 15:45:45) 
[GCC 8.3.1 20191121 (Red Hat 8.3.1-5)]
============================= test session starts ==============================
platform linux -- Python 3.6.8, pytest-3.4.2, py-1.5.3, pluggy-0.6.0 -- /usr/libexec/platform-python
cachedir: .pytest_cache
metadata: {'Python': '3.6.8', 'Platform': 'Linux-4.18.0-180.el8.x86_64-x86_64-with-redhat-8.2-Ootpa', 'Packages': {'pytest': '3.4.2', 'py': '1.5.3', 'pluggy': '0.6.0'}, 'Plugins': {'metadata': '1.8.0', 'html': '1.22.1', 'sourceorder': '0.5', 'multihost': '3.0'}}
rootdir: /home/cloud-user, inifile:
plugins: metadata-1.8.0, html-1.22.1, sourceorder-0.5, multihost-3.0
collecting ... collected 9 items

test_forced_client_reenrollment.py::TestForcedClientReenrollment::test_reenroll_with_force_join <- ../../usr/lib/python3.6/site-packages/ipatests/test_integration/test_forced_client_reenrollment.py PASSED [ 11%]
test_forced_client_reenrollment.py::TestForcedClientReenrollment::test_reenroll_with_keytab <- ../../usr/lib/python3.6/site-packages/ipatests/test_integration/test_forced_client_reenrollment.py PASSED [ 22%]
test_forced_client_reenrollment.py::TestForcedClientReenrollment::test_reenroll_with_both_force_join_and_keytab <- ../../usr/lib/python3.6/site-packages/ipatests/test_integration/test_forced_client_reenrollment.py PASSED [ 33%]
test_forced_client_reenrollment.py::TestForcedClientReenrollment::test_reenroll_to_replica <- ../../usr/lib/python3.6/site-packages/ipatests/test_integration/test_forced_client_reenrollment.py PASSED [ 44%]
test_forced_client_reenrollment.py::TestForcedClientReenrollment::test_try_to_reenroll_with_disabled_host <- ../../usr/lib/python3.6/site-packages/ipatests/test_integration/test_forced_client_reenrollment.py PASSED [ 55%]
test_forced_client_reenrollment.py::TestForcedClientReenrollment::test_try_to_reenroll_with_uninstalled_host <- ../../usr/lib/python3.6/site-packages/ipatests/test_integration/test_forced_client_reenrollment.py PASSED [ 66%]
test_forced_client_reenrollment.py::TestForcedClientReenrollment::test_try_to_reenroll_with_deleted_host <- ../../usr/lib/python3.6/site-packages/ipatests/test_integration/test_forced_client_reenrollment.py PASSED [ 77%]
test_forced_client_reenrollment.py::TestForcedClientReenrollment::test_try_to_reenroll_with_incorrect_keytab <- ../../usr/lib/python3.6/site-packages/ipatests/test_integration/test_forced_client_reenrollment.py PASSED [ 88%]
test_forced_client_reenrollment.py::TestForcedClientReenrollment::test_try_to_reenroll_with_empty_keytab <- ../../usr/lib/python3.6/site-packages/ipatests/test_integration/test_forced_client_reenrollment.py PASSED [100%]

---------------- generated xml file: /home/cloud-user/junit.xml ----------------
----------- generated html file: file:///home/cloud-user/report.html -----------
========================= 9 passed in 1423.36 seconds ==========================

Comment 8 errata-xmlrpc 2020-04-28 15:44:54 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2020:1640