[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

This bug was fixed in the package libnss-ldap - 264-2.2ubuntu4.14.04.2 --- libnss-ldap (264-2.2ubuntu4.14.04.2) trusty; urgency=medium * Fix from upstream: + SIGPIPE not caught in do_atfork_child() (LP: #1397250) -- Jon Grimm Wed, 19 Oct 2016

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

seems like the changes have uploaded so unsubscribing the sponsors -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1397250 Title: SIGPIPE not caught in do_atfork_child() To manage notifications

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Tested version libnss-ldap_264-2.2ubuntu4.14.04.2 on amd64 from trusty- proposed. ubuntu@tldapclient:~$ ./testhosts.pl Parent! Child! Done! Parent wake! Done! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Verified fixed with trusty-proposed. ** Tags removed: verification-needed ** Tags added: verification-done -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1397250 Title: SIGPIPE not caught in

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Hello Marcello, or anyone else affected, Accepted libnss-ldap into trusty-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/libnss- ldap/264-2.2ubuntu4.14.04.2 in a few hours, and then in the -proposed repository. Please help us by testing this new

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

** Description changed: - Ubuntu version: Ubuntu 14.04.1 LTS - Package version: libnss-ldap_264-2.2ubuntu4 + [Impact] - If a process using libnss-ldap calls fork() and SIGPIPE was blocked, the atfork() handler in the child process failed to catch the SIGPIPE as it was supposed to do, that is

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Adding debdiff for trusty. ** Changed in: libnss-ldap (Ubuntu Trusty) Importance: Undecided => High ** Changed in: libnss-ldap (Ubuntu Xenial) Status: New => Won't Fix ** Changed in: libnss-ldap (Ubuntu Yakkety) Status: New => Won't Fix ** Patch added:

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

This bug was fixed in the package libnss-ldap - 265-3ubuntu3 --- libnss-ldap (265-3ubuntu3) zesty; urgency=medium * Fix from upstream: + SIGPIPE not caught in do_atfork_child() (LP: #1397250) -- Jon Grimm Wed, 19 Oct 2016 16:01:16 -0500 **

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

** Changed in: libnss-ldap (Ubuntu) Status: Triaged => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1397250 Title: SIGPIPE not caught in do_atfork_child() To manage

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Adding DEP3 headers ** Patch added: "libnss-ldap_265-3ubuntu3.debdiff" https://bugs.launchpad.net/ubuntu/+source/libnss-ldap/+bug/1397250/+attachment/4764884/+files/libnss-ldap_265-3ubuntu3.debdiff ** Patch removed: "libnss-ldap_265-3ubuntu3.debdiff"

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

** Changed in: libnss-ldap (Ubuntu Trusty) Assignee: (unassigned) => Jon Grimm (jgrimm) ** Changed in: libnss-ldap (Ubuntu Trusty) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

How I test: 1) Configure slapd (server) and libnss-ldap/ldap-utils (client) Note: Ubuntu Server Guide is a godsend to a newbie. https://help.ubuntu.com/lts/serverguide/openldap-server.html 2) Configure slapd (server) to serve up desired /etc/hosts information Note: The Arch folks have some

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Zesty debdiff for Sponsorship please. ** Patch added: "libnss-ldap_265-3ubuntu3.debdiff" https://bugs.launchpad.net/ubuntu/+source/libnss-ldap/+bug/1397250/+attachment/4764553/+files/libnss-ldap_265-3ubuntu3.debdiff -- You received this bug notification because you are a member of Ubuntu

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Consulted with racb, my plan of attack will be to SRU the patch only into trusty (with push to zesty first) for now. If someone else can reproduce the bug on xenial and/or yakkety, AND is will to test fix, I'll SRU into those releases correspondingly. -- You received this bug notification

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

** Also affects: libnss-ldap (Ubuntu Xenial) Importance: Undecided Status: New ** Also affects: libnss-ldap (Ubuntu Yakkety) Importance: Undecided Status: New ** Also affects: libnss-ldap (Ubuntu Trusty) Importance: Undecided Status: New -- You received this bug

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

OK, built trusty's libnss-ldap with the patch referenced by the bug submitter. Indeed, it too resolved the issue. So to summarize: 1) Only trusty's libnss-ldap seems to fail. 2) The bug seems fixable by any of the following: a) patch in comment #1, or b) updating trusty to xenial/yakkety

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Minor update. 1) I was not able to reproduce on xenial (libnss-ldap 265-3ubuntu2) 2) I built a ppa with a trusty upgrade to 265-3ubuntu2 codebase.. interestingly, I was unable to reproduce. I find this odd (still) because the proposed fix is not in that code base. I still need to. Rebuild

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Sadly, just getting back to this. Testing with StartTLS as per suggestion. I can reproduce this with trusty client, but not with yakkety. I've not tested with xenial yet. This baffles me a bit as I don't see the proposed fix in the yakkety source, but maybe something else comes into play with

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Please push upstream the new 266 version from the author's git repository as this bug has serious drawbacks like breaking postgresql installation on all our servers using it. The 266 version is about 6 years old and contains a lot of bug fixes, I think it would be worth to use it.

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Ah. Great! Will see if StartTLS can help me trigger it! Thanks @marcello-bancasio -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1397250 Title: SIGPIPE not caught in do_atfork_child() To manage

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Ah. Great! Will see if StartTLS can help me trigger it! Thanks @marcello-bancasio -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1397250 Title: SIGPIPE not caught in do_atfork_child()

Re: [Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

@jon.grimm I can reproduce after I set up LDAP server and client to use StartTLS. In plain setup, no write to non-connected socket is issued in the atfork handlers of child process, so no SIGPIPE is raised. On Wed, Aug 26, 2015 at 7:45 PM, Jon Grimm jon.gr...@canonical.com wrote: @brianquigley,

Re: [Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

@jon.grimm I can reproduce after I set up LDAP server and client to use StartTLS. In plain setup, no write to non-connected socket is issued in the atfork handlers of child process, so no SIGPIPE is raised. On Wed, Aug 26, 2015 at 7:45 PM, Jon Grimm jon.gr...@canonical.com wrote: @brianquigley,

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

@brianquigley, Thanks for responding. Indeed, may have to wait unless I can find someone that can reproduce and/or speak to impacting them rather than theoretical. FWIW, debian sid has 265.. and does not have a patch with the fix yet either. -- You received this bug notification because you are

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

@jgrimm If I had an environment for testing it, it's long since been deleted.I worked it on behalf of someone else, they've since moved to sssd. I think going forward if we can get version 266 for 16.04 that would be fine.. -- You received this bug notification because you are a member of

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

@jgrimm If I had an environment for testing it, it's long since been deleted.I worked it on behalf of someone else, they've since moved to sssd. I think going forward if we can get version 266 for 16.04 that would be fine.. -- You received this bug notification because you are a member of

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

@brianquigley, Thanks for responding. Indeed, may have to wait unless I can find someone that can reproduce and/or speak to impacting them rather than theoretical. FWIW, debian sid has 265.. and does not have a patch with the fix yet either. -- You received this bug notification because you are

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Interestingly rebuilding 265-3ubuntu2 with DEBUG enabled... the code path of do_child_atfork() isn't even hitting (no debug statements from that function emitted). do_child_atfork() is where the proposed fix touches. Additionally, I backleveled my trusty VM to 264-2.2ubuntu4. The

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Interestingly rebuilding 265-3ubuntu2 with DEBUG enabled... the code path of do_child_atfork() isn't even hitting (no debug statements from that function emitted). do_child_atfork() is where the proposed fix touches. Additionally, I backleveled my trusty VM to 264-2.2ubuntu4. The

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Another reproducer script to try. Make sure you don't have NSCD installed. ** Attachment added: break-fork.pl https://bugs.launchpad.net/ubuntu/+source/libnss-ldap/+bug/1397250/+attachment/4452177/+files/break-fork.pl -- You received this bug notification because you are a member of Ubuntu

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Thanks Bryan, verified NCSD isn't running. New script passes just fine for me too; no segfault seen with either test reproducer. Additionally, verified that I'm pulling expected entry results from my ldap server. -- You received this bug notification because you are a member of Ubuntu Bugs,

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Another reproducer script to try. Make sure you don't have NSCD installed. ** Attachment added: break-fork.pl https://bugs.launchpad.net/ubuntu/+source/libnss-ldap/+bug/1397250/+attachment/4452177/+files/break-fork.pl -- You received this bug notification because you are a member of Ubuntu

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Thanks Bryan, verified NCSD isn't running. New script passes just fine for me too; no segfault seen with either test reproducer. Additionally, verified that I'm pulling expected entry results from my ldap server. -- You received this bug notification because you are a member of Ubuntu Server

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

FWIW, I tried to recreate this with the testcase shown here: http://bugzilla.padl.com/show_bug.cgi?id=414 on both trusty (264-2.2ubuntu4.14.04.1) and wily (265-3ubuntu2), but testcase passed fine (even ran in loop). Neither package has the fix from upstream. So, I'll probably rebuild

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

FWIW, I tried to recreate this with the testcase shown here: http://bugzilla.padl.com/show_bug.cgi?id=414 on both trusty (264-2.2ubuntu4.14.04.1) and wily (265-3ubuntu2), but testcase passed fine (even ran in loop). Neither package has the fix from upstream. So, I'll probably rebuild

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

** Changed in: libnss-ldap (Ubuntu) Assignee: (unassigned) = Jon Grimm (jgrimm) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1397250 Title: SIGPIPE not caught in do_atfork_child() To manage

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

** Changed in: libnss-ldap (Ubuntu) Assignee: (unassigned) = Jon Grimm (jgrimm) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1397250 Title: SIGPIPE not caught in

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

The author posted the source code of nss_ldap 266 (including the fix for this bug) to https://github.com/PADL/nss_ldap -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1397250 Title:

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

The author posted the source code of nss_ldap 266 (including the fix for this bug) to https://github.com/PADL/nss_ldap -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1397250 Title: SIGPIPE not

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Note, I emailed upstream about the 266 version coming out/ project status. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1397250 Title: SIGPIPE not caught in do_atfork_child() To

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Note, I emailed upstream about the 266 version coming out/ project status. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1397250 Title: SIGPIPE not caught in do_atfork_child() To manage

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

** Changed in: libnss-ldap (Ubuntu) Importance: Undecided = High ** Changed in: libnss-ldap (Ubuntu) Status: New = Triaged -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report.

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

** Changed in: libnss-ldap (Ubuntu) Importance: Undecided = High ** Changed in: libnss-ldap (Ubuntu) Status: New = Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1397250 Title:

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Thank you for taking the time to report this bug and helping to make Ubuntu better. Has this patch gone upstream at all, please? We'd prefer to not have to maintain patches indefinitely. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

AFAICT it seems this has been fixed upstream for libnss-ldap 266 (http://bugzilla.padl.com/show_bug.cgi?id=414) and then the project died? (it hasn't done an update since 2010. ** Bug watch added: PADL Bugzilla #414 http://bugzilla.padl.com/show_bug.cgi?id=414 ** Bug watch added: PADL

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

** Changed in: nss-ldap Status: Unknown = Fix Released ** Changed in: nss-ldap Importance: Unknown = Medium -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libnss-ldap in Ubuntu. https://bugs.launchpad.net/bugs/1397250

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

Thank you for taking the time to report this bug and helping to make Ubuntu better. Has this patch gone upstream at all, please? We'd prefer to not have to maintain patches indefinitely. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

AFAICT it seems this has been fixed upstream for libnss-ldap 266 (http://bugzilla.padl.com/show_bug.cgi?id=414) and then the project died? (it hasn't done an update since 2010. ** Bug watch added: PADL Bugzilla #414 http://bugzilla.padl.com/show_bug.cgi?id=414 ** Bug watch added: PADL

[Bug 1397250] Re: SIGPIPE not caught in do_atfork_child()

** Changed in: nss-ldap Status: Unknown = Fix Released ** Changed in: nss-ldap Importance: Unknown = Medium -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1397250 Title: SIGPIPE not