Red Hat Bugzilla – Bug 1099811
Apache crashes when replica is restarted when installing
Last modified: 2015-03-05 05:10:54 EST
Description of problem: Apache crashes when installing 6.5 master+replica and 5.11 Client. In discussing with Rob and team, it was decided to remove extra restart Version-Release number of selected component (if applicable): ipa-server-3.0.0-37.el6.x86_64 How reproducible: always Steps to Reproduce: 1. Used beaker to install the environment using quickinstall for QE tests Actual results: Crash is detetcted Expected results: No crash Additional info: Email from Rob: I found this in /var/log/messages May 19 09:13:34 pogolinux-01 setsebool: The httpd_can_network_connect policy boolean was changed to on by root May 19 09:13:34 pogolinux-01 setsebool: The httpd_manage_ipa policy boolean was changed to on by root May 19 09:13:35 pogolinux-01 kernel: httpd[19488]: segfault at 30 ip 00007f333682a7c7 sp 00007fffe606d050 error 4 in libapr-1.so.0.3.9[7f3336816000+2b000] May 19 09:13:35 pogolinux-01 kernel: httpd[19489]: segfault at 30 ip 00007f333682a7c7 sp 00007fffe606f6d0 error 4 in libapr-1.so.0.3.9[7f3336816000+2b000] May 19 09:13:35 pogolinux-01 kernel: May 19 09:13:35 pogolinux-01 abrt[19523]: Not saving repeating crash in '/usr/sbin/httpd' May 19 09:13:36 pogolinux-01 abrt[19524]: Saved core dump of pid 19488 (/usr/sbin/httpd) to /var/spool/abrt/ccpp-2014-05-19-09:13:35-19488 (73166848 bytes) May 19 09:13:36 pogolinux-01 abrtd: Directory 'ccpp-2014-05-19-09:13:35-19488' creation detected My initial thought was that Apache was restarted in the middle of initialization. Based on the core it looked like it blew up on a python import. The ipareplica-install.log doesn't confirm this though. We restart the server after configuring SELinux and that is what is failing. Fortunately we restart it again a few steps later and that is fine which is why the install is successful. While I wonder why it is blowing up, it may mean we can drop an HTTP restart and save a few seconds.
Upstream ticket: https://fedorahosted.org/freeipa/ticket/4352
Created attachment 899584 [details] stack trace
Created attachment 899596 [details] IPA replica install log
This will be addressed in RHEL 7 with https://bugzilla.redhat.com/show_bug.cgi?id=1008018 Additionally we should not be trying to restart Apache twice in the same second.
Fixed upstream master: https://fedorahosted.org/freeipa/changeset/4484d4d58b479f36dfadbe16fa3fdba901b52c58 ipa-4-1: https://fedorahosted.org/freeipa/changeset/ccc3762b6ffd9e3680c567aca74a72e7a072c2fa ipa-4-0: https://fedorahosted.org/freeipa/changeset/cabc9bf8b355a0e42bc268565cf261143dd669f0
One redundant restart was removed from ipa-replica-install. Bug can be verified as SanityOnly, with just regression testing that # ipa-replica-install and # ipa-replica-install --setup-ca still work.
Verifying Sanity Only based on #comment8.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2015-0442.html