On Thu, Jan 28, 2016 at 10:25:53AM +0530, Prashant Bapat wrote:
> Hi,
> 
> We have a FreeIPA 4.1.4 setup on F21 servers. There is 1 master and 7
> replicas in different regions. Earlier there was only 1 replica. Since I
> added new replicas, on the master node, once in a while the kerberos
> process dumps core and everything stops working - authentication,
> replication etc. If we restart everything using "ipactl restart" things are
> back to normal.
> 
> Attached is the output from journalctl for kerberos.
> 
> Has anyone come across this ? Are there any pointers to troubleshooting
> this ?

This might be fixed recently by a patch from Simo
(2144b1eeb789639b8a3df287b580aeb6196188a8). But to help to better
identify the issue the content of the kdc logs around the time of the
crash might be useful. Additionally a full backtrace which you can get
by calling 

  coredumpclt gdb 4475

and then

  bt full

bye,
Sumit

> 
> Any help is appreciated.
> 
> Thanks.
> --Prashant

> Jan 26 03:15:59 ipa.example.net systemd-coredump[5000]: Process 4475 
> (krb5kdc) of user 0 dumped core.
> 
>                                                        Stack trace of thread 
> 4475:
>                                                        #0  0x00007f99de8c18d7 
> raise (libc.so.6)
>                                                        #1  0x00007f99de8c353a 
> abort (libc.so.6)
>                                                        #2  0x00007f99de8ba47d 
> __assert_fail_base (libc.so.6)
>                                                        #3  0x00007f99de8ba532 
> __assert_fail (libc.so.6)
>                                                        #4  0x00007f99d783a78f 
> ldap_get_values_len (libldap_r-2.4.so.2)
>                                                        #5  0x00007f99d7c8173e 
> ipadb_ldap_attr_to_int (ipadb.so)
>                                                        #6  0x00007f99d7c83f9c 
> ipadb_parse_ldap_entry (ipadb.so)
>                                                        #7  0x00007f99d7c849ab 
> ipadb_get_principal (ipadb.so)
>                                                        #8  0x00007f99e0433b14 
> krb5_db_get_principal (libkdb5.so.7)
>                                                        #9  0x000055768457c230 
> process_tgs_req (krb5kdc)
>                                                        #10 0x0000557684579fe3 
> dispatch (krb5kdc)
>                                                        #11 0x000055768458d8a0 
> process_packet (krb5kdc)
>                                                        #12 0x00007f99dec4cc78 
> verto_fire (libverto.so.1)
>                                                        #13 0x00007f99d6fb72a3 
> epoll_event_loop_once (libtevent.so.0)
>                                                        #14 0x00007f99d6fb5787 
> std_event_loop_once (libtevent.so.0)
>                                                        #15 0x00007f99d6fb1fed 
> _tevent_loop_once (libtevent.so.0)
>                                                        #16 0x00007f99dec4c3f7 
> verto_run (libverto.so.1)
>                                                        #17 0x00005576845795ab 
> main (krb5kdc)
>                                                        #18 0x00007f99de8acfe0 
> __libc_start_main (libc.so.6)
>                                                        #19 0x00005576845798f0 
> _start (krb5kdc)
> 
> Jan 26 03:15:59 ipa.example.net systemd-coredump[4999]: Process 4473 
> (krb5kdc) of user 0 dumped core.
> 
>                                                        Stack trace of thread 
> 4473:
>                                                        #0  0x00007f99de8c18d7 
> raise (libc.so.6)
>                                                        #1  0x00007f99de8c353a 
> abort (libc.so.6)
>                                                        #2  0x00007f99de8ba47d 
> __assert_fail_base (libc.so.6)
>                                                        #3  0x00007f99de8ba532 
> __assert_fail (libc.so.6)
>                                                        #4  0x00007f99d783a78f 
> ldap_get_values_len (libldap_r-2.4.so.2)
>                                                        #5  0x00007f99d7c8173e 
> ipadb_ldap_attr_to_int (ipadb.so)
>                                                        #6  0x00007f99d7c83f9c 
> ipadb_parse_ldap_entry (ipadb.so)
>                                                        #7  0x00007f99d7c849ab 
> ipadb_get_principal (ipadb.so)
>                                                        #8  0x00007f99e0433b14 
> krb5_db_get_principal (libkdb5.so.7)
>                                                        #9  0x000055768457c230 
> process_tgs_req (krb5kdc)
>                                                        #10 0x0000557684579fe3 
> dispatch (krb5kdc)
>                                                        #11 0x000055768458d8a0 
> process_packet (krb5kdc)
>                                                        #12 0x00007f99dec4cc78 
> verto_fire (libverto.so.1)
>                                                        #13 0x00007f99d6fb72a3 
> epoll_event_loop_once (libtevent.so.0)
>                                                        #14 0x00007f99d6fb5787 
> std_event_loop_once (libtevent.so.0)
>                                                        #15 0x00007f99d6fb1fed 
> _tevent_loop_once (libtevent.so.0)
>                                                        #16 0x00007f99dec4c3f7 
> verto_run (libverto.so.1)
>                                                        #17 0x00005576845795ab 
> main (krb5kdc)
>                                                        #18 0x00007f99de8acfe0 
> __libc_start_main (libc.so.6)
>                                                        #19 0x00005576845798f0 
> _start (krb5kdc)

> -- 
> Manage your subscription for the Freeipa-users mailing list:
> https://www.redhat.com/mailman/listinfo/freeipa-users
> Go to http://freeipa.org for more info on the project

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to