Red Hat Bugzilla – Bug 797332
nfs-utils idmapd exports incompatible conf API calls that conflict with libnfsidmap
Last modified: 2012-05-08 00:11:31 EDT
Created attachment 565697 [details]
Modifications to rpm spec to include new patch
Description of problem:
In conjunction with the patch for bug 705952, rpc.idmapd exports the conf API in nfs-utils:support/nfs/conffile.c, which is incompatible with the similar conf API in libnfsidmap:cfg.c. For one thing the members of struct conf_trans are not aligned similarly.
This incompatibility predates Fedora 16 but doesn't seem to have been exposed until now. I'm not sure if it's due to a glibc or binutils change. But now, the dynamically loadable modules in libnfsidmap are reading a corrupted conf data structure (e.g. it sees the "value" data in the "tag" variable) and consequently rpc.idmapd crashes after the umich_ldap.so module is loaded. Of course, to see this you have to apply the patch in 705952 or the ldap functionality is completely stubbed out.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Apply patch 705952 to libnfsidmap library
2. Configure /etc/idmapd.conf to use an ldap server for id mapping
3. run /usr/sbin/rpc.idmapd.
A working nfs4 idmapper.
The attach patch limits the visibility of the symbols in the nfs-utils
conffile.c so that they are only visible to programs linked directly to
it. This forces the objects dynamically loaded via libnfsidmap to use the
functions defined in that shared library instead.
Created attachment 565698 [details]
Modify conffile.c not to make global symbols visible to plugins
(In reply to comment #1)
> Created attachment 565698 [details]
> Modify conffile.c not to make global symbols visible to plugins
Would it be possible to post this patch upstream at Linux NFS Mailing list <firstname.lastname@example.org> using the appropriate signed-off-by line?
(In reply to comment #2)
> (In reply to comment #1)
> > Created attachment 565698 [details]
> > Modify conffile.c not to make global symbols visible to plugins
> Would it be possible to post this patch upstream at Linux NFS Mailing list
> <email@example.com> using the appropriate signed-off-by line?
Never mind I just did....
nfs-utils-1.2.5-5.fc16 has been submitted as an update for Fedora 16.
nfs-utils-1.2.5-13.fc17 has been submitted as an update for Fedora 17.
* should fix your issue,
* was pushed to the Fedora 17 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing nfs-utils-1.2.5-13.fc17'
as soon as you are able to.
Please go to the following url:
then log in and leave karma (feedback).
nfs-utils-1.2.5-5.fc16 has been pushed to the Fedora 16 stable repository. If problems still persist, please make note of it in this bug report.
nfs-utils-1.2.5-14.fc17 has been pushed to the Fedora 17 stable repository. If problems still persist, please make note of it in this bug report.