Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1950253

Summary: kadmin.local terminates with memory error ( free(): invalid next size (fast) )
Product: Red Hat Enterprise Linux 8 Reporter: Renaud Marigny <rmarigny>
Component: ipaAssignee: Thomas Woerner <twoerner>
Status: CLOSED DUPLICATE QA Contact: ipa-qe <ipa-qe>
Severity: high Docs Contact:
Priority: unspecified    
Version: 8.2CC: abokovoy, frenaud, Mario.GamboaPang, rcritten, tscherf
Target Milestone: betaFlags: pm-rhel: mirror+
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-04-21 09:15:17 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Comment 1 Mario Gamboa 2021-04-16 13:50:15 UTC 
Just to let you know this is happening on rhel version 8.3 no 8.2 as per bug was created


Starting replication, please wait until this has completed.
Update in progress, 5 seconds elapsed
Update succeeded

  [3/30]: creating ACIs for admin
  [4/30]: creating installation admin user
  [5/30]: configuring certificate server instance
  [6/30]: Add ipa-pki-wait-running
  [7/30]: secure AJP connector
  [8/30]: reindex attributes
  [9/30]: exporting Dogtag certificate store pin
  [10/30]: stopping certificate server instance to update CS.cfg
  [11/30]: backing up CS.cfg
  [12/30]: disabling nonces
  [13/30]: set up CRL publishing
  [14/30]: enable PKIX certificate path discovery and validation
  [15/30]: destroying installation admin user
  [16/30]: starting certificate server instance
  [17/30]: Finalize replication settings
  [18/30]: configure certmonger for renewals
  [19/30]: Importing RA key
  [20/30]: setting audit signing renewal to 2 years
  [21/30]: restarting certificate server
  [22/30]: authorizing RA to modify profiles
  [23/30]: authorizing RA to manage lightweight CAs
  [24/30]: Ensure lightweight CAs container exists
  [25/30]: configure certificate renewals
  [26/30]: Configure HTTP to proxy connections
  [27/30]: restarting certificate server
  [28/30]: updating IPA configuration
  [29/30]: enabling CA instance
  [30/30]: configuring certmonger renewal for lightweight CAs
Done configuring certificate server (pki-tomcatd).
Your system may be partly configured.
Run /usr/sbin/ipa-server-install --uninstall to clean up.

CalledProcessError(Command ['/usr/sbin/kadmin.local', '-q', 'addprinc -randkey dogtag/ulpidm003.lnx.auiag.corp.CORP', '-x', 'ipa-setup-override-restrictions'] returned non-zero exit status -6: 'No policy specified for dogtag/ulpidm003.lnx.auiag.corp.CORP; defaulting to no policy\nfree(): invalid next size (fast)\n')
The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information
Comment 2 Mario Gamboa 2021-04-16 13:55:37 UTC 
From the /var/log/krb5kdc.log              

Apr 16 23:20:44 ulpidm003.lnx.auiag.corp krb5kdc[36816](info): setting up network...
Apr 16 23:20:44 ulpidm003.lnx.auiag.corp krb5kdc[36816](info): setsockopt(9,IPV6_V6ONLY,1) worked
Apr 16 23:20:44 ulpidm003.lnx.auiag.corp krb5kdc[36816](info): setsockopt(11,IPV6_V6ONLY,1) worked
Apr 16 23:20:44 ulpidm003.lnx.auiag.corp krb5kdc[36816](info): set up 4 sockets
Apr 16 23:42:00 ulpidm003.lnx.auiag.corp krb5kdc[41408](info): Loaded
Apr 16 23:42:00 ulpidm003.lnx.auiag.corp krb5kdc[41408](Error): preauth pkinit failed to initialize: PKINIT initialization failed: Cannot read certificate file '/var/kerberos/krb5kdc/kdc.crt': No such file or directory


From /var/log/ipareplica-conncheck.log


2021-04-16T13:41:19Z DEBUG /usr/sbin/ipa-replica-conncheck was invoked with options: {'master': 'ulpidm002.lnx.auiag.corp', 'auto_master_check': True, 'realm': 'LNX.AUIAG.CORP', 'kdc': None, 'principal': None, 'ca_cert_file': '/etc/ipa/ca.crt', 'replica': None, 'check_ca': False, 'hostname': 'ulpidm003.lnx.auiag.corp', 'debug': False, 'quiet': False, 'log_to_file': True}
2021-04-16T13:41:19Z DEBUG missing options might be asked for interactively later

2021-04-16T13:41:19Z DEBUG IPA version 4.8.7-14.module+el8.3.0+9419+8502777d
2021-04-16T13:41:19Z INFO Check connection from replica to remote master 'ulpidm002.lnx.auiag.corp':
2021-04-16T13:41:19Z INFO    Directory Service: Unsecure port (389): OK
2021-04-16T13:41:19Z INFO    Directory Service: Secure port (636): OK
2021-04-16T13:41:19Z INFO    Kerberos KDC: TCP (88): OK
2021-04-16T13:41:19Z INFO    Kerberos Kpasswd: TCP (464): OK
2021-04-16T13:41:19Z INFO    HTTP Server: Unsecure port (80): OK
2021-04-16T13:41:19Z INFO    HTTP Server: Secure port (443): OK
2021-04-16T13:41:19Z INFO
The following list of ports use UDP protocol and would need to be
checked manually:
2021-04-16T13:41:19Z INFO    Kerberos KDC: UDP (88): SKIPPED
2021-04-16T13:41:19Z INFO    Kerberos Kpasswd: UDP (464): SKIPPED
2021-04-16T13:41:19Z INFO
Connection from replica to master is OK.
2021-04-16T13:41:19Z INFO Start listening on required ports for remote master check
2021-04-16T13:41:19Z DEBUG Starting listening thread.
2021-04-16T13:41:19Z DEBUG Original thread stopped
2021-04-16T13:41:19Z DEBUG 389 tcp: Started listening
2021-04-16T13:41:19Z DEBUG 636 tcp: Started listening
2021-04-16T13:41:19Z DEBUG 88 tcp: Started listening
2021-04-16T13:41:19Z DEBUG 88 udp: Started listening
2021-04-16T13:41:19Z DEBUG 464 tcp: Started listening
2021-04-16T13:41:19Z DEBUG 464 udp: Started listening
2021-04-16T13:41:19Z WARNING 80 tcp: Failed to bind
2021-04-16T13:41:19Z DEBUG Traceback (most recent call last):
  File "/usr/sbin/ipa-replica-conncheck", line 341, in _bind_to_port
    sock.bind((host, port))
OSError: [Errno 98] Address already in use

2021-04-16T13:41:19Z WARNING 443 tcp: Failed to bind
2021-04-16T13:41:19Z DEBUG Traceback (most recent call last):
  File "/usr/sbin/ipa-replica-conncheck", line 341, in _bind_to_port
    sock.bind((host, port))
OSError: [Errno 98] Address already in use

2021-04-16T13:41:19Z DEBUG Ports opened, notify original thread
2021-04-16T13:41:19Z DEBUG Original thread resumed
2021-04-16T13:41:19Z INFO Get credentials to log in to remote master
2021-04-16T13:41:19Z DEBUG KRB5CCNAME set to /tmp/tmpo21us59c
2021-04-16T13:41:19Z INFO Check RPC connection to remote master
2021-04-16T13:41:19Z DEBUG Starting external process
2021-04-16T13:41:19Z DEBUG args=['/usr/bin/certutil', '-d', '/tmp/tmpuibydz3r', '-N', '-f', '/tmp/tmpuibydz3r/pwdfile.txt', '-@', '/tmp/tmpuibydz3r/pwdfile.txt']
2021-04-16T13:41:19Z DEBUG Process finished, return code=0
2021-04-16T13:41:19Z DEBUG stdout=
2021-04-16T13:41:19Z DEBUG stderr=
2021-04-16T13:41:19Z DEBUG Starting external process
2021-04-16T13:41:19Z DEBUG args=['/usr/sbin/selinuxenabled']
2021-04-16T13:41:19Z DEBUG Process finished, return code=0
2021-04-16T13:41:19Z DEBUG stdout=
2021-04-16T13:41:19Z DEBUG stderr=
2021-04-16T13:41:19Z DEBUG Starting external process
2021-04-16T13:41:19Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmpuibydz3r']
2021-04-16T13:41:19Z DEBUG Process finished, return code=0
2021-04-16T13:41:19Z DEBUG stdout=Warning no default label for /tmp/tmpuibydz3r

2021-04-16T13:41:19Z DEBUG stderr=
2021-04-16T13:41:19Z DEBUG Starting external process
2021-04-16T13:41:19Z DEBUG args=['/usr/sbin/selinuxenabled']
2021-04-16T13:41:19Z DEBUG Process finished, return code=0
2021-04-16T13:41:19Z DEBUG stdout=
2021-04-16T13:41:19Z DEBUG stderr=
2021-04-16T13:41:19Z DEBUG Starting external process
2021-04-16T13:41:19Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmpuibydz3r/cert9.db']
2021-04-16T13:41:19Z DEBUG Process finished, return code=0
2021-04-16T13:41:19Z DEBUG stdout=Warning no default label for /tmp/tmpuibydz3r/cert9.db

2021-04-16T13:41:19Z DEBUG stderr=
2021-04-16T13:41:19Z DEBUG Starting external process
2021-04-16T13:41:19Z DEBUG args=['/usr/sbin/selinuxenabled']
2021-04-16T13:41:19Z DEBUG Process finished, return code=0
2021-04-16T13:41:19Z DEBUG stdout=
2021-04-16T13:41:19Z DEBUG stderr=
2021-04-16T13:41:19Z DEBUG Starting external process
2021-04-16T13:41:19Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmpuibydz3r/key4.db']
2021-04-16T13:41:19Z DEBUG Process finished, return code=0
2021-04-16T13:41:19Z DEBUG stdout=Warning no default label for /tmp/tmpuibydz3r/key4.db

2021-04-16T13:41:19Z DEBUG stderr=
2021-04-16T13:41:19Z DEBUG Starting external process
2021-04-16T13:41:19Z DEBUG args=['/usr/sbin/selinuxenabled']
2021-04-16T13:41:19Z DEBUG Process finished, return code=0
2021-04-16T13:41:19Z DEBUG stdout=
2021-04-16T13:41:19Z DEBUG stderr=
2021-04-16T13:41:19Z DEBUG Starting external process
2021-04-16T13:41:19Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmpuibydz3r/pkcs11.txt']
2021-04-16T13:41:19Z DEBUG Process finished, return code=0
2021-04-16T13:41:19Z DEBUG stdout=Warning no default label for /tmp/tmpuibydz3r/pkcs11.txt

2021-04-16T13:41:19Z DEBUG stderr=
2021-04-16T13:41:19Z DEBUG Starting external process
2021-04-16T13:41:19Z DEBUG args=['/usr/sbin/selinuxenabled']
2021-04-16T13:41:19Z DEBUG Process finished, return code=0
2021-04-16T13:41:19Z DEBUG stdout=
2021-04-16T13:41:19Z DEBUG stderr=
2021-04-16T13:41:19Z DEBUG Starting external process
2021-04-16T13:41:19Z DEBUG args=['/sbin/restorecon', '-F', '/tmp/tmpuibydz3r/pwdfile.txt']
2021-04-16T13:41:19Z DEBUG Process finished, return code=0
2021-04-16T13:41:19Z DEBUG stdout=Warning no default label for /tmp/tmpuibydz3r/pwdfile.txt

2021-04-16T13:41:19Z DEBUG stderr=
2021-04-16T13:41:19Z DEBUG Starting external process
2021-04-16T13:41:19Z DEBUG args=['/usr/bin/certutil', '-d', 'sql:/tmp/tmpuibydz3r', '-A', '-n', 'CN=Certificate Authority,O=LNX.AUIAG.CORP', '-t', 'C,,', '-a', '-f', '/tmp/tmpuibydz3r/pwdfile.txt']
2021-04-16T13:41:19Z DEBUG Process finished, return code=0
2021-04-16T13:41:19Z DEBUG stdout=
2021-04-16T13:41:19Z DEBUG stderr=
2021-04-16T13:41:19Z DEBUG importing all plugin modules in ipaclient.remote_plugins.schema$70235405...
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.remote_plugins.schema$70235405.plugins
2021-04-16T13:41:19Z DEBUG importing all plugin modules in ipaclient.plugins...
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.automember
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.automount
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.ca
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.cert
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.certmap
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.certprofile
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.dns
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.hbacrule
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.hbactest
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.host
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.idrange
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.internal
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.location
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.migration
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.misc
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.otptoken
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.otptoken_yubikey
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.passwd
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.permission
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.rpcclient
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.server
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.service
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.sudorule
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.topology
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.trust
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.user
2021-04-16T13:41:19Z DEBUG importing plugin module ipaclient.plugins.vault
2021-04-16T13:41:20Z DEBUG failed to find session_cookie in persistent storage for principal 'admin.CORP'
2021-04-16T13:41:20Z DEBUG trying https://ulpidm002.lnx.auiag.corp/ipa/json
2021-04-16T13:41:20Z DEBUG New HTTP connection (ulpidm002.lnx.auiag.corp)
2021-04-16T13:41:20Z DEBUG received Set-Cookie (<class 'list'>)'['ipa_session=MagBearerToken=VulswkmrOIn9zg5OCm5IcmzzqEok06q5is8mDgmHpLYq10jC%2b%2fyyrHJtFMVmp2wE4YVbQkrG5OInzd8f7CnauegqTRSTVfjv56OMtuGUbPFtejOC86VUHbJ122rLQY5GBJzd1OXK5arpYy2TU3jPCouWYvGacWl%2bL0M3bOQMvkHGXAd1EquwPeZdru4bkaoXqetK%2b0L38G0A1QWPNmc3uA%3d%3d;path=/ipa;httponly;secure;']'
2021-04-16T13:41:20Z DEBUG storing cookie 'ipa_session=MagBearerToken=VulswkmrOIn9zg5OCm5IcmzzqEok06q5is8mDgmHpLYq10jC%2b%2fyyrHJtFMVmp2wE4YVbQkrG5OInzd8f7CnauegqTRSTVfjv56OMtuGUbPFtejOC86VUHbJ122rLQY5GBJzd1OXK5arpYy2TU3jPCouWYvGacWl%2bL0M3bOQMvkHGXAd1EquwPeZdru4bkaoXqetK%2b0L38G0A1QWPNmc3uA%3d%3d;' for principal admin.CORP
2021-04-16T13:41:20Z DEBUG Created connection context.rpcclient_140519135065592
2021-04-16T13:41:20Z DEBUG raw: ping(version='2.239')
2021-04-16T13:41:20Z DEBUG ping(version='2.239')
2021-04-16T13:41:20Z DEBUG [try 1]: Forwarding 'ping/1' to json server 'https://ulpidm002.lnx.auiag.corp/ipa/json'
2021-04-16T13:41:20Z DEBUG HTTP connection keep-alive (ulpidm002.lnx.auiag.corp)
2021-04-16T13:41:20Z DEBUG received Set-Cookie (<class 'list'>)'['ipa_session=MagBearerToken=e9lvNKckUJRuRjY3zrG2myR2CngJwmuUAcxM3nayZaL1RRHlyufsmmXgL4iMBy6soEOgBMZOSu%2fGm22t4fCIRbzPSuNHkWmBlhkPwt08hbrE897X6qxoRJW7SJR4bf9Itj%2faimnmBa2XKYZ5wwczremyrtrKFavG9y%2bw6qYztHoSbbZi9vKe0X8X1D9l%2bYztojp%2fXmGX%2fubKmkwgzVjsZA%3d%3d;path=/ipa;httponly;secure;']'
2021-04-16T13:41:20Z DEBUG storing cookie 'ipa_session=MagBearerToken=e9lvNKckUJRuRjY3zrG2myR2CngJwmuUAcxM3nayZaL1RRHlyufsmmXgL4iMBy6soEOgBMZOSu%2fGm22t4fCIRbzPSuNHkWmBlhkPwt08hbrE897X6qxoRJW7SJR4bf9Itj%2faimnmBa2XKYZ5wwczremyrtrKFavG9y%2bw6qYztHoSbbZi9vKe0X8X1D9l%2bYztojp%2fXmGX%2fubKmkwgzVjsZA%3d%3d;' for principal admin.CORP
2021-04-16T13:41:20Z INFO Execute check on remote master
2021-04-16T13:41:20Z DEBUG [try 1]: Forwarding 'server_conncheck' to json server 'https://ulpidm002.lnx.auiag.corp/ipa/json'
2021-04-16T13:41:20Z DEBUG HTTP connection keep-alive (ulpidm002.lnx.auiag.corp)
2021-04-16T13:41:21Z DEBUG 389 tcp: Responded to ::ffff:10.138.16.22
2021-04-16T13:41:21Z DEBUG 636 tcp: Responded to ::ffff:10.138.16.22
2021-04-16T13:41:21Z DEBUG 88 tcp: Responded to ::ffff:10.138.16.22
2021-04-16T13:41:21Z DEBUG 88 udp: Responded to ::ffff:10.138.16.22
2021-04-16T13:41:21Z DEBUG 464 tcp: Responded to ::ffff:10.138.16.22
2021-04-16T13:41:21Z DEBUG 464 udp: Responded to ::ffff:10.138.16.22
2021-04-16T13:41:21Z DEBUG received Set-Cookie (<class 'list'>)'['ipa_session=MagBearerToken=KDNFF6iMl19uuBRvSefegYXGkR0egu15%2f%2fl27VoVciAfMZ7y97KFCZAcoe0zDadt3sNWkiNO%2b45hVnLTuBKtDkprQksXmHA0RopOfLbZ1hPRUOPupCTmqmpjlZlHpdXPhRdqpBTCDwmOLm4IRK%2buvAi3Z2G7LbF8ub7UTy2isi%2fABVUhe87Z6AqlBTgIokbd1mS2wJw7AfsoQ0R%2bcJTBfQ%3d%3d;path=/ipa;httponly;secure;']'
2021-04-16T13:41:21Z DEBUG storing cookie 'ipa_session=MagBearerToken=KDNFF6iMl19uuBRvSefegYXGkR0egu15%2f%2fl27VoVciAfMZ7y97KFCZAcoe0zDadt3sNWkiNO%2b45hVnLTuBKtDkprQksXmHA0RopOfLbZ1hPRUOPupCTmqmpjlZlHpdXPhRdqpBTCDwmOLm4IRK%2buvAi3Z2G7LbF8ub7UTy2isi%2fABVUhe87Z6AqlBTgIokbd1mS2wJw7AfsoQ0R%2bcJTBfQ%3d%3d;' for principal admin.CORP
2021-04-16T13:41:21Z INFO Check connection from master to remote replica 'ulpidm003.lnx.auiag.corp':
2021-04-16T13:41:21Z INFO    Directory Service: Unsecure port (389): OK
2021-04-16T13:41:21Z INFO    Directory Service: Secure port (636): OK
2021-04-16T13:41:21Z INFO    Kerberos KDC: TCP (88): OK
2021-04-16T13:41:21Z INFO    Kerberos KDC: UDP (88): OK
2021-04-16T13:41:21Z INFO    Kerberos Kpasswd: TCP (464): OK
2021-04-16T13:41:21Z INFO    Kerberos Kpasswd: UDP (464): OK
2021-04-16T13:41:21Z INFO    HTTP Server: Unsecure port (80): OK
2021-04-16T13:41:21Z INFO    HTTP Server: Secure port (443): OK
2021-04-16T13:41:21Z INFO
2021-04-16T13:41:21Z INFO Connection from master to replica is OK.
2021-04-16T13:41:21Z DEBUG Destroyed connection context.rpcclient_140519135065592
2021-04-16T13:41:21Z DEBUG Stopping listening thread.
2021-04-16T13:41:22Z DEBUG 389 tcp: Stopped listening
2021-04-16T13:41:22Z DEBUG 636 tcp: Stopped listening
2021-04-16T13:41:22Z DEBUG 88 tcp: Stopped listening
2021-04-16T13:41:22Z DEBUG 88 udp: Stopped listening
2022-04-16T13:41:22Z DEBUG 464 tcp: Stopped listening
2021-04-16T13:41:22Z DEBUG 464 udp: Stopped listening
Comment 3 Mario Gamboa 2021-04-16 13:57:58 UTC 
From /var/log/ipareplicat-install.log

2021-04-16T13:44:48Z DEBUG Loading StateFile from '/var/lib/ipa/sysupgrade/sysupgrade.state'
2021-04-16T13:44:48Z DEBUG Set up lightweight CA key retrieval
2021-04-16T13:44:48Z DEBUG Creating principal
2021-04-16T13:44:48Z DEBUG Starting external process
2021-04-16T13:44:48Z DEBUG args=['/usr/sbin/kadmin.local', '-q', 'addprinc -randkey dogtag/ulpidm003.lnx.auiag.corp.CORP', '-x', 'ipa-setup-override-restrictions']
2021-04-16T13:44:49Z DEBUG Process finished, return code=-6
2021-04-16T13:44:49Z DEBUG stdout=
2021-04-16T13:44:49Z DEBUG stderr=No policy specified for dogtag/ulpidm003.lnx.auiag.corp.CORP; defaulting to no policy
free(): invalid next size (fast)

2021-04-16T13:44:49Z DEBUG   File "/usr/lib/python3.6/site-packages/ipapython/admintool.py", line 179, in execute
    return_value = self.run()
  File "/usr/lib/python3.6/site-packages/ipapython/install/cli.py", line 340, in run
    return cfgr.run()
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 360, in run
    return self.execute()
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 386, in execute
    for rval in self._executor():
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 431, in __runner
    exc_handler(exc_info)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 460, in _handle_execute_exception
    self._handle_exception(exc_info)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 450, in _handle_exception
    six.reraise(*exc_info)
  File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
    raise value
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 421, in __runner
    step()
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 418, in <lambda>
    step = lambda: next(self.__gen)
  File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
    six.reraise(*exc_info)
  File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
    raise value
  File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
    value = gen.send(prev_value)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 655, in _configure
    next(executor)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 431, in __runner
    exc_handler(exc_info)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 460, in _handle_execute_exception
    self._handle_exception(exc_info)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 518, in _handle_exception
    self.__parent._handle_exception(exc_info)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 450, in _handle_exception
    six.reraise(*exc_info)
 File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
    raise value
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 515, in _handle_exception
    super(ComponentBase, self)._handle_exception(exc_info)
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 450, in _handle_exception
    six.reraise(*exc_info)
  File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
    raise value
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 421, in __runner
    step()
  File "/usr/lib/python3.6/site-packages/ipapython/install/core.py", line 418, in <lambda>
    step = lambda: next(self.__gen)
  File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from
    six.reraise(*exc_info)
  File "/usr/lib/python3.6/site-packages/six.py", line 693, in reraise
    raise value
  File "/usr/lib/python3.6/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from
    value = gen.send(prev_value)
  File "/usr/lib/python3.6/site-packages/ipapython/install/common.py", line 65, in _install
    for unused in self._installer(self.parent):
  File "/usr/lib/python3.6/site-packages/ipaserver/install/server/__init__.py", line 602, in main
    replica_install(self)
  File "/usr/lib/python3.6/site-packages/ipaserver/install/server/replicainstall.py", line 402, in decorated
    func(installer)
  File "/usr/lib/python3.6/site-packages/ipaserver/install/server/replicainstall.py", line 1318, in install
    ca.install(False, config, options, custodia=custodia)
  File "/usr/lib/python3.6/site-packages/ipaserver/install/ca.py", line 271, in install
    install_step_1(standalone, replica_config, options, custodia=custodia)
  File "/usr/lib/python3.6/site-packages/ipaserver/install/ca.py", line 382, in install_step_1
    ca.setup_lightweight_ca_key_retrieval()
  File "/usr/lib/python3.6/site-packages/ipaserver/install/cainstance.py", line 1279, in setup_lightweight_ca_key_retrieval
    self.__setup_lightweight_ca_key_retrieval_kerberos()
  File "/usr/lib/python3.6/site-packages/ipaserver/install/cainstance.py", line 1299, in __setup_lightweight_ca_key_retrieval_kerberos
    installutils.kadmin_addprinc(self.principal)
  File "/usr/lib/python3.6/site-packages/ipaserver/install/installutils.py", line 412, in kadmin_addprinc
    return kadmin("addprinc -randkey " + principal)
  File "/usr/lib/python3.6/site-packages/ipaserver/install/installutils.py", line 407, in kadmin
    capture_error=True
  File "/usr/lib/python3.6/site-packages/ipapython/ipautil.py", line 598, in run
    p.returncode, arg_string, output_log, error_log

2021-04-16T13:44:49Z DEBUG The ipa-replica-install command failed, exception: CalledProcessError: CalledProcessError(Command ['/usr/sbin/kadmin.local', '-q', 'addprinc -randkey dogtag/ulpidm003.lnx.auiag.corp.CORP', '-x', 'ipa-setup-override-restrictions'] returned non-zero exit status -6: 'No policy specified for dogtag/ulpidm003.lnx.auiag.corp.CORP; defaulting to no policy\nfree(): invalid next size (fast)\n')
2021-04-16T13:44:49Z ERROR CalledProcessError(Command ['/usr/sbin/kadmin.local', '-q', 'addprinc -randkey dogtag/ulpidm003.lnx.auiag.corp.CORP', '-x', 'ipa-setup-override-restrictions'] returned non-zero exit status -6: 'No policy specified for dogtag/ulpidm003.lnx.auiag.corp.CORP; defaulting to no policy\nfree(): invalid next size (fast)\n')
2021-04-16T13:44:49Z ERROR The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information
Comment 4 Florence Blanc-Renaud 2021-04-16 15:48:32 UTC 
From the sos report, the ipa-replica-install command is failing at 02:10:31Z

/var/log/ipareplica-install.log:
2021-04-14T02:10:31Z DEBUG args=['/usr/sbin/kadmin.local', '-q', 'addprinc -randkey dogtag/...', '-x', 'ipa-setup-override-restrictions']
2021-04-14T02:10:31Z DEBUG Process finished, return code=-6
2021-04-14T02:10:31Z DEBUG stdout=
2021-04-14T02:10:31Z DEBUG stderr=No policy specified for dogtag/...; defaulting to no policy
free(): invalid next size (fast)



And the journal shows a coredump:
/sos_commands/logs/journalctl_--no-pager:
Apr 14 12:10:31 ulpidm003.lnx.auiag.corp systemd-coredump[17167]: Process 17164 (kadmin.local) of user 0 dumped core.

                                                                  Stack trace of thread 17164:
                                                                  #0  0x00007f8d7381084f raise (libc.so.6)
                                                                  #1  0x00007f8d737fac45 abort (libc.so.6)
                                                                  #2  0x00007f8d738539d7 __libc_message (libc.so.6)
                                                                  #3  0x00007f8d7385addc malloc_printerr (libc.so.6)
                                                                  #4  0x00007f8d7385c778 _int_free (libc.so.6)
                                                                  #5  0x00007f8d72c9ad4b ipadb_mspac_struct_free (ipadb.so)
                                                                  #6  0x00007f8d72c92ad0 ipadb_context_free (ipadb.so)
                                                                  #7  0x00007f8d72c92c00 ipadb_fini_module (ipadb.so)
                                                                  #8  0x00007f8d7587c724 krb5_db_fini (libkdb5.so.10)
                                                                  #9  0x00007f8d75aa098a kadm5_destroy (libkadm5srv_mit.so.12)
                                                                  #10 0x0000564071d151c4 quit (kadmin.local)
                                                                  #11 0x0000564071d12c46 main (kadmin.local)
                                                                  #12 0x00007f8d737fc803 __libc_start_main (libc.so.6)
                                                                  #13 0x0000564071d12d4e _start (kadmin.local)
Apr 14 12:10:31 ulpidm003.lnx.auiag.corp systemd[1]: systemd-coredump: Succeeded.


Can you gather the coredump?

Note that it looks similar to BZ #1930426 where a coredump also happens in ipadb_mspac_struct_free, with the same version 4.8.7-14.module+el8.3.0+9419+8502777d.
Comment 5 Alexander Bokovoy 2021-04-16 18:07:09 UTC 
Flo, to me this looks indeed as a duplicate of that bugzilla.

8.3.0.z update was shipped 10 days ago as RHBA-2021:1083-02 and it includes the fix as a RHBZ#1930562.

Please update to 4.8.7-15 which provides the fix already.
Comment 6 Florence Blanc-Renaud 2021-04-21 09:15:17 UTC 
From the customer case, after update to 8.3.0.z:
"works now the version i got was 4.8.7-16 the replica installation works ok thanks"

This issue can be closed as duplicate of BZ #1930426

*** This bug has been marked as a duplicate of bug 1930426 ***
Comment 7 Red Hat Bugzilla 2023-09-15 01:05:14 UTC 
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 500 days