Bug 2121952 - FreeIPA server broken because httpd crashes in mod_auth_gssapi
Summary: FreeIPA server broken because httpd crashes in mod_auth_gssapi
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: mod_auth_gssapi
Version: rawhide
Hardware: All
OS: Linux
unspecified
high
Target Milestone: ---
Assignee: Simo Sorce
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: openqa
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-08-27 18:34 UTC by Adam Williamson
Modified: 2022-08-29 17:37 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2022-08-29 10:51:15 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
backtrace of the crash, crashing thread is 1 (199.74 KB, text/plain)
2022-08-27 18:35 UTC, Adam Williamson
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Github gssapi mod_auth_gssapi pull 271 0 None None None 2022-08-29 00:08:16 UTC
Red Hat Issue Tracker FREEIPA-8693 0 None None None 2022-08-27 18:42:57 UTC

Description Adam Williamson 2022-08-27 18:34:37 UTC
As of today's Rawhide compose, FreeIPA is broken because httpd is crashing in mod_auth_gssapi. Server deployment succeeds, but client enrolment of the server itself (which runs automatically right after server deployment) fails, and presumably most other practical use of the server would fail similarly.

I'm attaching a backtrace of the crash. The crashing thread is 1, it crashed in `mag_verify_config` in `mod_auth_gssapi.c`. mod_auth_gssapi was updated yesterday, so it's very likely the culprit (it's not on openQA's testing list so I don't have a test of that update specifically to prove it, but it looks very likely).

Comment 1 Adam Williamson 2022-08-27 18:35:41 UTC
Created attachment 1908059 [details]
backtrace of the crash, crashing thread is 1

Comment 2 Adam Williamson 2022-08-27 18:39:09 UTC
Looks like this was caused by https://github.com/gssapi/mod_auth_gssapi/pull/232 . Since that seems to be just adding a warning, as a quick fix we may be able to simply back it out.

Comment 3 Adam Williamson 2022-08-27 21:18:21 UTC
OK, my workaround worked. Leaving the bug open as the underlying bug is still there - whatever's wrong with the check needs fixing - but dropping the blocker metadata (actually the build wasn't run for F37 yet anyway so we didn't need it).

Comment 4 Simo Sorce 2022-08-29 00:08:17 UTC
PR to fix the issue here: https://github.com/gssapi/mod_auth_gssapi/pull/272


Note You need to log in before you can comment on or make changes to this bug.