Red Hat Bugzilla – Bug 1019285
sssd_be crashes sometime when installing ipa-client
Last modified: 2014-10-14 00:46:51 EDT
Created attachment 812471 [details] attaching back trace Description of problem: When running the ipa-client-install test suite, sssd_be crashed. In matching timestamps, the test that was running at the time was to install client using preserve-sssd, and the uninstall of this client may have caused it. But wasn't able to replicate the crash again Pavel took a look, and suggested it might be related to https://fedorahosted.org/sssd/ticket/1751 Version-Release number of selected component (if applicable): sssd-1.9.2-128 How reproducible: saw it once Steps to Reproduce: listed below in "additional info" Actual results: sssd_be crashed Expected results: no crash Additional info: The goal of the test is to install client using the option --preserve-sssd, and verify the install didn't overwrite it. the steps are: # cat /etc/sssd/sssd.conf [sssd] config_file_version = 2 domains = LDAP-KRB5 debug_level = 6 reconnection_retries = 3 services = nss, pam [nss] filter_groups = root filter_users = root [pam] [domain/LDAP-KRB5] id_provider = ldap auth_provider = krb5 ldap_uri = ldap://<hostname> debug_level = 9 krb5_server = ivanova.testrelm.com krb5_realm = TESTRELM.COM # chmod 0600 /etc/sssd/sssd.conf # authconfig --enablesssd --enablesssdauth --updateall # service sssd stop # service sssd start # perl -pi -e 's/EXAMPLE.COM/TESTRELM.COM/g' /etc/krb5.conf # perl -pi -e 's/example.com/testrelm.com/g' /etc/krb5.conf # perl -pi -e 's/kerberos.example.com/ivanova.testrelm.com/g' /etc/krb5.conf # ls -lZ /etc/krb5.conf # ipa-client-install --domain=testrelm.com --realm=TESTRELM.COM -p admin -w <password> --server=<hostname> --preserve-sssd # ausearch -m avc -ts $AVCCHKTS -su root:system_r:sssd_t:s0 -o root:object_r:etc_t:s0 |grep name=\"krb5.conf\"|wc -l # kinit admin # ipa-client-install --uninstall # mv /etc/sssd/sssd.conf /etc/sssd/sssd.conf.old.nk # service ntpd stop # ipa-client-install --uninstall # hostname localhost.localdomain # ipa-client-install --domain=testrelm.com --realm=TESTRELM.COM -p admin -w <password> --unattended --server=<hostname>
Upstream ticket: https://fedorahosted.org/sssd/ticket/1751
This request was not resolved in time for the current release. Red Hat invites you to ask your support representative to propose this request, if still desired, for consideration in the next release of Red Hat Enterprise Linux.
We have a workaround available, so I'm just marking this as assigned so far. I'd prefer to have a real fix.
Fixed upstream: 3082504f4fb4e4efdc50c99369204e5b2cfac40e
*** Bug 1068907 has been marked as a duplicate of this bug. ***
Verified. sssd, ipa-client rpm version: ============================= [root@rhel66-client1 ~]# rpm -q ipa-client sssd ipa-client-3.0.0-42.el6.x86_64 sssd-1.11.6-1.el6.x86_64 [root@rhel66-client1 ~]# Please find the attached console output as verification log.
Created attachment 917317 [details] verification steps with console output
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2014-1375.html