Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
Bug 1099811 - Apache crashes when replica is restarted when installing
Apache crashes when replica is restarted when installing
Status: CLOSED ERRATA
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: ipa (Show other bugs)
7.0
Unspecified Unspecified
medium Severity unspecified
: rc
: ---
Assigned To: Martin Kosek
Namita Soman
:
Depends On:
Blocks: 1101652
  Show dependency treegraph
 
Reported: 2014-05-21 04:59 EDT by Namita Soman
Modified: 2015-03-05 05:10 EST (History)
1 user (show)

See Also:
Fixed In Version: ipa-4.0.3-1.el7
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 1101652 (view as bug list)
Environment:
Last Closed: 2015-03-05 05:10:54 EST
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)
stack trace (21.08 KB, text/plain)
2014-05-27 12:42 EDT, Rob Crittenden
no flags Details
IPA replica install log (3.80 MB, application/x-gzip)
2014-05-27 13:00 EDT, Rob Crittenden
no flags Details


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2015:0442 normal SHIPPED_LIVE Moderate: ipa security, bug fix, and enhancement update 2015-03-05 09:50:39 EST

  None (edit)
Description Namita Soman 2014-05-21 04:59:49 EDT
Description of problem:
Apache crashes when installing 6.5 master+replica and 5.11 Client.

In discussing with Rob and team, it was decided to remove extra restart

Version-Release number of selected component (if applicable):
ipa-server-3.0.0-37.el6.x86_64

How reproducible:
always

Steps to Reproduce:
1. Used beaker to install the environment using quickinstall for QE tests


Actual results:
Crash is detetcted


Expected results:
No crash


Additional info:
Email from Rob:

I found this in /var/log/messages

May 19 09:13:34 pogolinux-01 setsebool: The httpd_can_network_connect
policy boolean was changed to on by root
May 19 09:13:34 pogolinux-01 setsebool: The httpd_manage_ipa policy
boolean was changed to on by root
May 19 09:13:35 pogolinux-01 kernel: httpd[19488]: segfault at 30 ip
00007f333682a7c7 sp 00007fffe606d050 error 4 in
libapr-1.so.0.3.9[7f3336816000+2b000]
May 19 09:13:35 pogolinux-01 kernel: httpd[19489]: segfault at 30 ip
00007f333682a7c7 sp 00007fffe606f6d0 error 4 in
libapr-1.so.0.3.9[7f3336816000+2b000]
May 19 09:13:35 pogolinux-01 kernel:
May 19 09:13:35 pogolinux-01 abrt[19523]: Not saving repeating crash in
'/usr/sbin/httpd'
May 19 09:13:36 pogolinux-01 abrt[19524]: Saved core dump of pid 19488
(/usr/sbin/httpd) to /var/spool/abrt/ccpp-2014-05-19-09:13:35-19488
(73166848 bytes)
May 19 09:13:36 pogolinux-01 abrtd: Directory
'ccpp-2014-05-19-09:13:35-19488' creation detected

My initial thought was that Apache was restarted in the middle of
initialization. Based on the core it looked like it blew up on a python
import. The ipareplica-install.log doesn't confirm this though. We
restart the server after configuring SELinux and that is what is
failing. Fortunately we restart it again a few steps later and that is
fine which is why the install is successful. While I wonder why it is
blowing up, it may mean we can drop an HTTP restart and save a few seconds.
Comment 3 Martin Kosek 2014-05-27 06:34:59 EDT
Upstream ticket:
https://fedorahosted.org/freeipa/ticket/4352
Comment 4 Rob Crittenden 2014-05-27 12:42:47 EDT
Created attachment 899584 [details]
stack trace
Comment 5 Rob Crittenden 2014-05-27 13:00:37 EDT
Created attachment 899596 [details]
IPA replica install log
Comment 6 Rob Crittenden 2014-05-28 08:43:03 EDT
This will be addressed in RHEL 7 with https://bugzilla.redhat.com/show_bug.cgi?id=1008018

Additionally we should not be trying to restart Apache twice in the same second.
Comment 8 Martin Kosek 2014-09-05 07:20:50 EDT
One redundant restart was removed from ipa-replica-install.

Bug can be verified as SanityOnly, with just regression testing that
# ipa-replica-install
and
# ipa-replica-install --setup-ca
still work.
Comment 10 Namita Soman 2015-01-26 12:42:04 EST
Verifying Sanity Only based on #comment8.
Comment 12 errata-xmlrpc 2015-03-05 05:10:54 EST
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHSA-2015-0442.html

Note You need to log in before you can comment on or make changes to this bug.