RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1835741 - krb5kdc crashing on ipa server
Summary: krb5kdc crashing on ipa server
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: ipa
Version: 7.7
Hardware: All
OS: Linux
high
high
Target Milestone: rc
: ---
Assignee: Florence Blanc-Renaud
QA Contact: ipa-qe
URL:
Whiteboard:
: 1913378 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-05-14 12:15 UTC by aheverle
Modified: 2024-03-25 15:55 UTC (History)
17 users (show)

Fixed In Version: ipa-4.6.8-5.el7_9.5
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-04-27 11:35:58 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)
coredump from crash (4.36 MB, application/x-core)
2020-05-14 12:15 UTC, aheverle 		no flags Details
krb5kdc_6_16086.core (3.36 MB, application/x-core)
2020-09-03 12:24 UTC, aheverle 		no flags Details
krb5kdc_6_16087.core (3.36 MB, application/x-core)
2020-09-03 12:25 UTC, aheverle 		no flags Details
krb5kdc_6_16096.core (4.44 MB, application/x-core)
2020-09-03 12:25 UTC, aheverle 		no flags Details
krb5kdc_6_16100.core (4.42 MB, application/x-core)
2020-09-03 12:26 UTC, aheverle 		no flags Details
View All


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2021:1395 0 None None None 2021-04-27 11:36:11 UTC

Description aheverle 2020-05-14 12:15:25 UTC 
Created attachment 1688415 [details]
coredump from crash

Description of problem:
krb5kdc crashing

Version-Release number of selected component (if applicable):
ipa-server-4.6.6-11.el7.x86_64

How reproducible:
Often/random

Actual results:

/usr/sbin/krb5kdc (pid=17218,uid=0,gid=0) crashed with signal 6 Coredump=/coredump/krb5kdc_6_17218.core

[New LWP 17218]
[Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `/usr/sbin/krb5kdc -P /var/run/krb5kdc.pid -w 16'.
Program terminated with signal 6, Aborted.
#0  0x00007fe772bf1387 in raise () from /lib64/libc.so.6
--- Standard backtrace ---

Thread 1 (Thread 0x7fe774dbb840 (LWP 17218)):
#0  0x00007fe772bf1387 in raise () from /lib64/libc.so.6
#1  0x00007fe772bf2a78 in abort () from /lib64/libc.so.6
#2  0x00007fe772bea1a6 in __assert_fail_base () from /lib64/libc.so.6
#3  0x00007fe772bea252 in __assert_fail () from /lib64/libc.so.6
#4  0x00007fe76a4412d5 in ldap_get_values_len () from /lib64/libldap_r-2.4.so.2
#5  0x00007fe76bfe5d23 in ipadb_parse_user_auth () from /usr/lib64/krb5/plugins/kdb/ipadb.so
#6  0x00007fe76bfea698 in ipadb_parse_ldap_entry () from /usr/lib64/krb5/plugins/kdb/ipadb.so
#7  0x00007fe76bfeb2bb in ipadb_get_principal () from /usr/lib64/krb5/plugins/kdb/ipadb.so
#8  0x00007fe77477cbb7 in krb5_db_get_principal () from /lib64/libkdb5.so.8
#9  0x000055855dd81294 in process_as_req ()
#10 0x000055855dd7fdd2 in dispatch ()
#11 0x000055855dd93950 in process_tcp_connection_read ()
#12 0x00007fe772f8bcd8 in verto_fire () from /lib64/libverto.so.1
#13 0x00007fe76b216b13 in tevent_common_invoke_fd_handler () from /lib64/libtevent.so.0
#14 0x00007fe76b21d087 in epoll_event_loop_once () from /lib64/libtevent.so.0
#15 0x00007fe76b21b057 in std_event_loop_once () from /lib64/libtevent.so.0
#16 0x00007fe76b21625d in _tevent_loop_once () from /lib64/libtevent.so.0
#17 0x00007fe772f8b4af in verto_run () from /lib64/libverto.so.1
#18 0x000055855dd7eaf6 in main ()
Comment 17 aheverle 2020-09-03 12:24:30 UTC 
Created attachment 1713595 [details]
krb5kdc_6_16086.core
Comment 18 aheverle 2020-09-03 12:25:03 UTC 
Created attachment 1713596 [details]
krb5kdc_6_16087.core
Comment 19 aheverle 2020-09-03 12:25:36 UTC 
Created attachment 1713597 [details]
krb5kdc_6_16096.core
Comment 20 aheverle 2020-09-03 12:26:09 UTC 
Created attachment 1713598 [details]
krb5kdc_6_16100.core
Comment 35 Rob Crittenden 2021-01-12 14:13:43 UTC 
*** Bug 1913378 has been marked as a duplicate of this bug. ***
Comment 39 Florence Blanc-Renaud 2021-03-02 12:49:29 UTC 
Fixed upstream
master:
https://pagure.io/freeipa/c/47d49aa7b795a31c559ce75e49940f5b5aac8d0f
https://pagure.io/freeipa/c/1d2a14a2d20ec2c67752d4269b2121e1f4676136
https://pagure.io/freeipa/c/f996c21edb2c55d779b25fd061a1042b01fa8a2e
https://pagure.io/freeipa/c/3037de2820a0f4eaa4293a1dab7dcf3fde3bf92b
https://pagure.io/freeipa/c/3fc75b15faea63c2468f70411e5604cc62bb4dce

ipa-4-9:
https://pagure.io/freeipa/c/2832810891acfaca68142df7271d6f0a50a588eb
https://pagure.io/freeipa/c/0da9de495ca41a1bf0926aef7c9c75c3e53dcd63
https://pagure.io/freeipa/c/c7ce801b590e29263e9b1904995c603735007771
https://pagure.io/freeipa/c/f340baa4283c76957d9e0a85896c7fa3a994bba6
https://pagure.io/freeipa/c/2968609fd9f8f91b704dc8167d39ecc67beb8ddd
Comment 40 Florence Blanc-Renaud 2021-03-10 09:05:15 UTC 
Adding z-stream? flag to request a 7.9z fix.
Comment 41 Florence Blanc-Renaud 2021-03-10 09:09:44 UTC 
Fixed upstream:
ipa-4-6:

    972a486 ipa-kdb: fix compiler warnings
    a244b4f ipa-kdb: add missing prototypes
    b37797f ipa-kdb: reformat ipa_kdb_certauth
    ee5c04f ipa-kdb: mark test functions as static
    95822c7 ipa-kdb: do not use OpenLDAP functions with NULL LDAP context

ipa-4-8:

    701d0fb ipa-kdb: fix compiler warnings
    d454ca8 ipa-kdb: add missing prototypes
    da98a6f ipa-kdb: reformat ipa_kdb_certauth
    aa7f99c ipa-kdb: mark test functions as static
    79baa09 ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
Comment 46 anuja 2021-04-14 06:51:44 UTC 
Verified based on sanity checks.
Using:
ipa-server-4.6.8-5.el7_9.5.x86_64
Comment 50 errata-xmlrpc 2021-04-27 11:35:58 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (ipa bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:1395
Comment 51 Red Hat Bugzilla 2023-09-15 00:31:48 UTC 
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 500 days
Note You need to log in before you can comment on or make changes to this bug.