from:"Frank Heimes"

[Freeipa] [Bug 2044242] Re: ipa-client-install seg faults (s390x)

2023-11-23 Thread Frank Heimes

Hi Timo, yes, I agree.
Looks like the fault is coming from ext_dce.cpython-310-s390x-linux-gnu.so, 
that is in python3-gssapi.  
But Ubuntu seems to be pretty up to date with python3-gssapi: 
 python3-gssapi | 1.6.12-1build2 | jammy/universe  | amd64, arm64, armhf, 
ppc64el, riscv64, s390x
 python3-gssapi | 1.8.2-1build1  | lunar/universe  | amd64, arm64, armhf, 
ppc64el, riscv64, s390x
 python3-gssapi | 1.8.2-1build1  | mantic/universe | amd64, arm64, armhf, 
ppc64el, riscv64, s390x
There is a v1.8.3 upstream, but not in Debian, and we sync this from debian ...

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/2044242

Title:
  ipa-client-install seg faults (s390x)

Status in Ubuntu on IBM z Systems:
  New
Status in freeipa package in Ubuntu:
  Confirmed

Bug description:
  Executing 'ipa-client-install' (package: freeipa-client) is causing a
  segmentation fault:

  ubuntu@server:~$ sudo apt install freeipa-client
  ubuntu@server:~$ ipa-client-install
  Segmentation fault (core dumped)
  ubuntu@server:~$ ls -l /var/crash/
  total 2012
  -rw-r- 1 ubuntu ubuntu 2057124 Nov 22 08:22 
_usr_sbin_ipa-client-install.1000.crash
  ubuntu@server:~$ vi /var/log/syslog
  ...
  Nov 22 08:22:33 server kernel: [  162.136131] User process fault: 
interruption code 003b ilc:2 in 
ext_dce.cpython-310-s390x-linux-gnu.so[3ff8b88+4000]
  Nov 22 08:22:33 server kernel: [  162.136153] Failing address: 
03ff23f0f000 TEID: 03ff23f0f800
  Nov 22 08:22:33 server kernel: [  162.136156] Fault in primary space mode 
while using user ASCE.
  Nov 22 08:22:33 server kernel: [  162.136160] AS:9f5581c7 
R3:0024
  Nov 22 08:22:33 server kernel: [  162.136166] CPU: 3 PID: 4294 Comm: 
ipa-client-inst Not tainted 5.15.0-89-generic #99-Ubuntu
  Nov 22 08:22:33 server kernel: [  162.136169] Hardware name: IBM 2964 N63 400 
(z/VM 6.4.0)
  Nov 22 08:22:33 server kernel: [  162.136170] User PSW : 070520018000 
03ff23f0f150
  Nov 22 08:22:33 server kernel: [  162.136173]R:0 T:1 IO:1 EX:1 
Key:0 M:1 W:0 P:1 AS:0 CC:2 PM:0 RI:0 EA:3
  Nov 22 08:22:33 server kernel: [  162.136176] User GPRS: 0f010043 
02aa242fb170 03ff8b885240 0600
  Nov 22 08:22:33 server kernel: [  162.136178]0080 
02aa242fb170 03ff8b882c00 03ff8bde6d70
  Nov 22 08:22:33 server kernel: [  162.136180]03ff8bd50450 
03ff8bdbc7b0 03ff8bd599b0 03ff8bd599e0
  Nov 22 08:22:33 server kernel: [  162.136182]03ff8c8b0f90 
03ff8bdbc7b0 02aa23f49cac 03ffe5c745c0
  Nov 22 08:22:33 server kernel: [  162.136189] User Code: Bad PSW.
  Nov 22 08:22:33 server kernel: [  162.136190] Last Breaking-Event-Address:
  Nov 22 08:22:33 server kernel: [  162.136190]  [<03ff8b882c06>] 
0x3ff8b882c06
  Nov 22 08:22:33 server systemd[986]: Started D-Bus User Message Bus.
  Nov 22 08:22:33 server dbus-daemon[4303]: [session uid=1000 pid=4303] 
AppArmor D-Bus mediation is enabled
  ...

  ProblemType: Bug
  DistroRelease: Ubuntu 22.04
  Package: freeipa-client 4.9.8-1
  ProcVersionSignature: Ubuntu 5.15.0-89.99-generic 5.15.126
  Uname: Linux 5.15.0-89-generic s390x
  ApportVersion: 2.20.11-0ubuntu82.5
  Architecture: s390x
  CasperMD5CheckResult: pass
  CloudArchitecture: s390x
  CloudID: none
  CloudName: none
  CloudPlatform: none
  CloudSubPlatform: config
  Date: Wed Nov 22 08:52:47 2023
  InstallationDate: Installed on 2023-11-22 (0 days ago)
  InstallationMedia: Ubuntu-Server 22.04.2 LTS "Jammy Jellyfish" - Release 
s390x (20230220.1)
  SourcePackage: freeipa
  UpgradeStatus: No upgrade log present (probably fresh install)

  $ apt-cache policy freeipa-client
  freeipa-client:
Installed: 4.9.8-1
Candidate: 4.9.8-1
Version table:
   *** 4.9.8-1 500
  500 http://ports.ubuntu.com/ubuntu-ports jammy/universe s390x Packages
  100 /var/lib/dpkg/status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/2044242/+subscriptions


___
Mailing list: https://launchpad.net/~freeipa
Post to : freeipa@lists.launchpad.net
Unsubscribe : https://launchpad.net/~freeipa
More help   : https://help.launchpad.net/ListHelp

[Freeipa] [Bug 2044242] Re: ipa-client-install seg faults (s390x)

2023-11-22 Thread Frank Heimes

I tried this on a different platform, here ppc64el and ipa-client-install does 
not seg fault there:
ubuntu@p10d-lpar06:~$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:Ubuntu 22.04.3 LTS
Release:22.04
Codename:   jammy
ubuntu@p10d-lpar06:~$ arch
ppc64le
ubuntu@p10d-lpar06:~$ sudo ipa-client-install
This program will set up IPA client.
Version 4.9.8
...
And I also found LP tickets where people could run it on amd64.

Hence I strongly believe that this is a s390x specific problem.

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/2044242

Title:
  ipa-client-install seg faults (s390x)

Status in Ubuntu on IBM z Systems:
  New
Status in freeipa package in Ubuntu:
  New

Bug description:
  Executing 'ipa-client-install' (package: freeipa-client) is causing a
  segmentation fault:

  ubuntu@server:~$ sudo apt install freeipa-client
  ubuntu@server:~$ ipa-client-install
  Segmentation fault (core dumped)
  ubuntu@server:~$ ls -l /var/crash/
  total 2012
  -rw-r- 1 ubuntu ubuntu 2057124 Nov 22 08:22 
_usr_sbin_ipa-client-install.1000.crash
  ubuntu@server:~$ vi /var/log/syslog
  ...
  Nov 22 08:22:33 server kernel: [  162.136131] User process fault: 
interruption code 003b ilc:2 in 
ext_dce.cpython-310-s390x-linux-gnu.so[3ff8b88+4000]
  Nov 22 08:22:33 server kernel: [  162.136153] Failing address: 
03ff23f0f000 TEID: 03ff23f0f800
  Nov 22 08:22:33 server kernel: [  162.136156] Fault in primary space mode 
while using user ASCE.
  Nov 22 08:22:33 server kernel: [  162.136160] AS:9f5581c7 
R3:0024
  Nov 22 08:22:33 server kernel: [  162.136166] CPU: 3 PID: 4294 Comm: 
ipa-client-inst Not tainted 5.15.0-89-generic #99-Ubuntu
  Nov 22 08:22:33 server kernel: [  162.136169] Hardware name: IBM 2964 N63 400 
(z/VM 6.4.0)
  Nov 22 08:22:33 server kernel: [  162.136170] User PSW : 070520018000 
03ff23f0f150
  Nov 22 08:22:33 server kernel: [  162.136173]R:0 T:1 IO:1 EX:1 
Key:0 M:1 W:0 P:1 AS:0 CC:2 PM:0 RI:0 EA:3
  Nov 22 08:22:33 server kernel: [  162.136176] User GPRS: 0f010043 
02aa242fb170 03ff8b885240 0600
  Nov 22 08:22:33 server kernel: [  162.136178]0080 
02aa242fb170 03ff8b882c00 03ff8bde6d70
  Nov 22 08:22:33 server kernel: [  162.136180]03ff8bd50450 
03ff8bdbc7b0 03ff8bd599b0 03ff8bd599e0
  Nov 22 08:22:33 server kernel: [  162.136182]03ff8c8b0f90 
03ff8bdbc7b0 02aa23f49cac 03ffe5c745c0
  Nov 22 08:22:33 server kernel: [  162.136189] User Code: Bad PSW.
  Nov 22 08:22:33 server kernel: [  162.136190] Last Breaking-Event-Address:
  Nov 22 08:22:33 server kernel: [  162.136190]  [<03ff8b882c06>] 
0x3ff8b882c06
  Nov 22 08:22:33 server systemd[986]: Started D-Bus User Message Bus.
  Nov 22 08:22:33 server dbus-daemon[4303]: [session uid=1000 pid=4303] 
AppArmor D-Bus mediation is enabled
  ...

  ProblemType: Bug
  DistroRelease: Ubuntu 22.04
  Package: freeipa-client 4.9.8-1
  ProcVersionSignature: Ubuntu 5.15.0-89.99-generic 5.15.126
  Uname: Linux 5.15.0-89-generic s390x
  ApportVersion: 2.20.11-0ubuntu82.5
  Architecture: s390x
  CasperMD5CheckResult: pass
  CloudArchitecture: s390x
  CloudID: none
  CloudName: none
  CloudPlatform: none
  CloudSubPlatform: config
  Date: Wed Nov 22 08:52:47 2023
  InstallationDate: Installed on 2023-11-22 (0 days ago)
  InstallationMedia: Ubuntu-Server 22.04.2 LTS "Jammy Jellyfish" - Release 
s390x (20230220.1)
  SourcePackage: freeipa
  UpgradeStatus: No upgrade log present (probably fresh install)

  $ apt-cache policy freeipa-client
  freeipa-client:
Installed: 4.9.8-1
Candidate: 4.9.8-1
Version table:
   *** 4.9.8-1 500
  500 http://ports.ubuntu.com/ubuntu-ports jammy/universe s390x Packages
  100 /var/lib/dpkg/status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/2044242/+subscriptions


___
Mailing list: https://launchpad.net/~freeipa
Post to : freeipa@lists.launchpad.net
Unsubscribe : https://launchpad.net/~freeipa
More help   : https://help.launchpad.net/ListHelp

[Freeipa] [Bug 2044242] Re: ipa-client-install seg faults (s390x)

2023-11-22 Thread Frank Heimes

$ sudo apport-unpack /var/crash/_usr_sbin_ipa-client-install.0.crash /tmp/crash
$ /tmp/crash
$ DEBUGINFOD_URLS=https://debuginfod.ubuntu.com gdb `cat ExecutablePath` 
CoreDump
GNU gdb (Ubuntu 12.1-0ubuntu1~22.04) 12.1
Copyright (C) 2022 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later 
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "s390x-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
.
Find the GDB manual and other documentation resources online at:
.

For help, type "help".
Type "apropos word" to search for commands related to "word"...
"/usr/sbin/ipa-client-install": not in executable format: file format not 
recognized
[New LWP 1520]

This GDB supports auto-downloading debuginfo from the following URLs:
https://debuginfod.ubuntu.com
Enable debuginfod for this session? (y or [n]) y
Debuginfod has been enabled.
To make this setting permanent, add 'set debuginfod enabled on' to .gdbinit.
Core was generated by `/usr/bin/python3 -I /usr/sbin/ipa-client-install'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x03ff3880f150 in ?? ()
(gdb) bt
#0  0x03ff3880f150 in ?? ()
#1  0x02aa38849cac in ?? ()
PC not saved
(gdb) 

# DEBUGINFOD_URLS=https://debuginfod.ubuntu.com gdb python3
GNU gdb (Ubuntu 12.1-0ubuntu1~22.04) 12.1
Copyright (C) 2022 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later 
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "s390x-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
.
Find the GDB manual and other documentation resources online at:
.

For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from python3...
Reading symbols from 
/usr/lib/debug/.build-id/61/7ec16f82f98e94969fd0f36d71da0a7de8b5fb.debug...
(gdb) run /usr/sbin/ipa-client-install
Starting program: /usr/bin/python3 /usr/sbin/ipa-client-install

This GDB supports auto-downloading debuginfo from the following URLs:
https://debuginfod.ubuntu.com
Enable debuginfod for this session? (y or [n]) y
Debuginfod has been enabled.
To make this setting permanent, add 'set debuginfod enabled on' to .gdbinit.
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/s390x-linux-gnu/libthread_db.so.1".

Program received signal SIGSEGV, Segmentation fault.
0x0420f150 in ?? ()
(gdb) bt
#0  0x0420f150 in ?? ()
#1  0x02aa00249cac in _PyImport_LoadDynamicModuleWithSpec (fp=, 
spec=, 
origin='/usr/lib/python3/dist-packages/gssapi/raw/_enum_extensions/ext_dce.cpython-310-s390x-linux-gnu.so',
 loader_state=None, submodule_search_locations=None, _set_fileattr=True, 
_cached=None) at remote 0x3fffd4eaec0>)
at ../Python/importdl.c:167
#2  _imp_create_dynamic_impl (module=, file=, 
spec=, 
origin='/usr/lib/python3/dist-packages/gssapi/raw/_enum_extensions/ext_dce.cpython-310-s390x-linux-gnu.so',
 loader_state=None, submodule_search_locations=None, _set_fileattr=True, 
_cached=None) at remote 0x3fffd4eaec0>)
at ../Python/import.c:2050
#3  _imp_create_dynamic (module=, args=, 
nargs=)
at ../Python/clinic/import.c.h:330
#4  0x02aa00118800 in cfunction_vectorcall_FASTCALL (
func=, args=0x3fffd45c8c8, 
nargsf=, kwnames=) at 
../Objects/methodobject.c:430
#5  0x02aa000feee4 in do_call_core (kwdict={}, 
callargs=(, 
origin='/usr/lib/python3/dist-packages/gssapi/raw/_enum_extensions/ext_dce.cpython-310-s390x-linux-gnu.so',
 loader_state=None, submodule_search_locations=None, _set_fileattr=True, 
_cached=None) at remote 0x3fffd4eaec0>,), 
func=, trace_info=, tstate=) 
at ../Python/ceval.c:5945

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/2044242

Title:
  ipa-client-install seg faults (s390x)

Status in Ubuntu on IBM z Systems:
  New
Status in freeipa package in Ubuntu:
  New

Bug description:
  Executing 'ipa-client-install' (package: freeipa-client) is causing a
  segmentation fault:

  ubuntu@server:~$ sudo apt install freeipa-client
  ubuntu@server:~$ ipa-client-install
  Segmentation fault (core dumped)
  ubuntu@server:~$ ls -l /var/crash/
  total 2012
  -rw-r- 1 ubuntu ubuntu 2057124 Nov 22 08:22 
_usr_sbin_ipa-client-install.1000.crash
  ubuntu@server:~$ vi /var/log/sysl

[Freeipa] [Bug 2044242] Re: ipa-client-install seg faults (s390x)

2023-11-22 Thread Frank Heimes

Initially this crash happened on 22.04.3, but 23.10 is affected as well.

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/2044242

Title:
  ipa-client-install seg faults (s390x)

Status in Ubuntu on IBM z Systems:
  New
Status in freeipa package in Ubuntu:
  New

Bug description:
  Executing 'ipa-client-install' (package: freeipa-client) is causing a
  segmentation fault:

  ubuntu@server:~$ sudo apt install freeipa-client
  ubuntu@server:~$ ipa-client-install
  Segmentation fault (core dumped)
  ubuntu@server:~$ ls -l /var/crash/
  total 2012
  -rw-r- 1 ubuntu ubuntu 2057124 Nov 22 08:22 
_usr_sbin_ipa-client-install.1000.crash
  ubuntu@server:~$ vi /var/log/syslog
  ...
  Nov 22 08:22:33 server kernel: [  162.136131] User process fault: 
interruption code 003b ilc:2 in 
ext_dce.cpython-310-s390x-linux-gnu.so[3ff8b88+4000]
  Nov 22 08:22:33 server kernel: [  162.136153] Failing address: 
03ff23f0f000 TEID: 03ff23f0f800
  Nov 22 08:22:33 server kernel: [  162.136156] Fault in primary space mode 
while using user ASCE.
  Nov 22 08:22:33 server kernel: [  162.136160] AS:9f5581c7 
R3:0024
  Nov 22 08:22:33 server kernel: [  162.136166] CPU: 3 PID: 4294 Comm: 
ipa-client-inst Not tainted 5.15.0-89-generic #99-Ubuntu
  Nov 22 08:22:33 server kernel: [  162.136169] Hardware name: IBM 2964 N63 400 
(z/VM 6.4.0)
  Nov 22 08:22:33 server kernel: [  162.136170] User PSW : 070520018000 
03ff23f0f150
  Nov 22 08:22:33 server kernel: [  162.136173]R:0 T:1 IO:1 EX:1 
Key:0 M:1 W:0 P:1 AS:0 CC:2 PM:0 RI:0 EA:3
  Nov 22 08:22:33 server kernel: [  162.136176] User GPRS: 0f010043 
02aa242fb170 03ff8b885240 0600
  Nov 22 08:22:33 server kernel: [  162.136178]0080 
02aa242fb170 03ff8b882c00 03ff8bde6d70
  Nov 22 08:22:33 server kernel: [  162.136180]03ff8bd50450 
03ff8bdbc7b0 03ff8bd599b0 03ff8bd599e0
  Nov 22 08:22:33 server kernel: [  162.136182]03ff8c8b0f90 
03ff8bdbc7b0 02aa23f49cac 03ffe5c745c0
  Nov 22 08:22:33 server kernel: [  162.136189] User Code: Bad PSW.
  Nov 22 08:22:33 server kernel: [  162.136190] Last Breaking-Event-Address:
  Nov 22 08:22:33 server kernel: [  162.136190]  [<03ff8b882c06>] 
0x3ff8b882c06
  Nov 22 08:22:33 server systemd[986]: Started D-Bus User Message Bus.
  Nov 22 08:22:33 server dbus-daemon[4303]: [session uid=1000 pid=4303] 
AppArmor D-Bus mediation is enabled
  ...

  ProblemType: Bug
  DistroRelease: Ubuntu 22.04
  Package: freeipa-client 4.9.8-1
  ProcVersionSignature: Ubuntu 5.15.0-89.99-generic 5.15.126
  Uname: Linux 5.15.0-89-generic s390x
  ApportVersion: 2.20.11-0ubuntu82.5
  Architecture: s390x
  CasperMD5CheckResult: pass
  CloudArchitecture: s390x
  CloudID: none
  CloudName: none
  CloudPlatform: none
  CloudSubPlatform: config
  Date: Wed Nov 22 08:52:47 2023
  InstallationDate: Installed on 2023-11-22 (0 days ago)
  InstallationMedia: Ubuntu-Server 22.04.2 LTS "Jammy Jellyfish" - Release 
s390x (20230220.1)
  SourcePackage: freeipa
  UpgradeStatus: No upgrade log present (probably fresh install)

  $ apt-cache policy freeipa-client
  freeipa-client:
Installed: 4.9.8-1
Candidate: 4.9.8-1
Version table:
   *** 4.9.8-1 500
  500 http://ports.ubuntu.com/ubuntu-ports jammy/universe s390x Packages
  100 /var/lib/dpkg/status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/2044242/+subscriptions


___
Mailing list: https://launchpad.net/~freeipa
Post to : freeipa@lists.launchpad.net
Unsubscribe : https://launchpad.net/~freeipa
More help   : https://help.launchpad.net/ListHelp

[Freeipa] [Bug 2044242] Re: ipa-client-install seg faults (s390x)

2023-11-22 Thread Frank Heimes

** Summary changed:

- ipa-client-install seg faults on 22.04.3 (s390x)
+ ipa-client-install seg faults (s390x)

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/2044242

Title:
  ipa-client-install seg faults (s390x)

Status in Ubuntu on IBM z Systems:
  New
Status in freeipa package in Ubuntu:
  New

Bug description:
  Executing 'ipa-client-install' (package: freeipa-client) is causing a
  segmentation fault:

  ubuntu@server:~$ sudo apt install freeipa-client
  ubuntu@server:~$ ipa-client-install
  Segmentation fault (core dumped)
  ubuntu@server:~$ ls -l /var/crash/
  total 2012
  -rw-r- 1 ubuntu ubuntu 2057124 Nov 22 08:22 
_usr_sbin_ipa-client-install.1000.crash
  ubuntu@server:~$ vi /var/log/syslog
  ...
  Nov 22 08:22:33 server kernel: [  162.136131] User process fault: 
interruption code 003b ilc:2 in 
ext_dce.cpython-310-s390x-linux-gnu.so[3ff8b88+4000]
  Nov 22 08:22:33 server kernel: [  162.136153] Failing address: 
03ff23f0f000 TEID: 03ff23f0f800
  Nov 22 08:22:33 server kernel: [  162.136156] Fault in primary space mode 
while using user ASCE.
  Nov 22 08:22:33 server kernel: [  162.136160] AS:9f5581c7 
R3:0024
  Nov 22 08:22:33 server kernel: [  162.136166] CPU: 3 PID: 4294 Comm: 
ipa-client-inst Not tainted 5.15.0-89-generic #99-Ubuntu
  Nov 22 08:22:33 server kernel: [  162.136169] Hardware name: IBM 2964 N63 400 
(z/VM 6.4.0)
  Nov 22 08:22:33 server kernel: [  162.136170] User PSW : 070520018000 
03ff23f0f150
  Nov 22 08:22:33 server kernel: [  162.136173]R:0 T:1 IO:1 EX:1 
Key:0 M:1 W:0 P:1 AS:0 CC:2 PM:0 RI:0 EA:3
  Nov 22 08:22:33 server kernel: [  162.136176] User GPRS: 0f010043 
02aa242fb170 03ff8b885240 0600
  Nov 22 08:22:33 server kernel: [  162.136178]0080 
02aa242fb170 03ff8b882c00 03ff8bde6d70
  Nov 22 08:22:33 server kernel: [  162.136180]03ff8bd50450 
03ff8bdbc7b0 03ff8bd599b0 03ff8bd599e0
  Nov 22 08:22:33 server kernel: [  162.136182]03ff8c8b0f90 
03ff8bdbc7b0 02aa23f49cac 03ffe5c745c0
  Nov 22 08:22:33 server kernel: [  162.136189] User Code: Bad PSW.
  Nov 22 08:22:33 server kernel: [  162.136190] Last Breaking-Event-Address:
  Nov 22 08:22:33 server kernel: [  162.136190]  [<03ff8b882c06>] 
0x3ff8b882c06
  Nov 22 08:22:33 server systemd[986]: Started D-Bus User Message Bus.
  Nov 22 08:22:33 server dbus-daemon[4303]: [session uid=1000 pid=4303] 
AppArmor D-Bus mediation is enabled
  ...

  ProblemType: Bug
  DistroRelease: Ubuntu 22.04
  Package: freeipa-client 4.9.8-1
  ProcVersionSignature: Ubuntu 5.15.0-89.99-generic 5.15.126
  Uname: Linux 5.15.0-89-generic s390x
  ApportVersion: 2.20.11-0ubuntu82.5
  Architecture: s390x
  CasperMD5CheckResult: pass
  CloudArchitecture: s390x
  CloudID: none
  CloudName: none
  CloudPlatform: none
  CloudSubPlatform: config
  Date: Wed Nov 22 08:52:47 2023
  InstallationDate: Installed on 2023-11-22 (0 days ago)
  InstallationMedia: Ubuntu-Server 22.04.2 LTS "Jammy Jellyfish" - Release 
s390x (20230220.1)
  SourcePackage: freeipa
  UpgradeStatus: No upgrade log present (probably fresh install)

  $ apt-cache policy freeipa-client
  freeipa-client:
Installed: 4.9.8-1
Candidate: 4.9.8-1
Version table:
   *** 4.9.8-1 500
  500 http://ports.ubuntu.com/ubuntu-ports jammy/universe s390x Packages
  100 /var/lib/dpkg/status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/2044242/+subscriptions


___
Mailing list: https://launchpad.net/~freeipa
Post to : freeipa@lists.launchpad.net
Unsubscribe : https://launchpad.net/~freeipa
More help   : https://help.launchpad.net/ListHelp

[Freeipa] [Bug 2044242] Re: ipa-client-install seg faults on 22.04.3 (s390x)

2023-11-22 Thread Frank Heimes

** Description changed:

  Executing 'ipa-client-install' (package: freeipa-client) is causing a
  segmentation fault:
  
  ubuntu@server:~$ sudo apt install freeipa-client
  ubuntu@server:~$ ipa-client-install
  Segmentation fault (core dumped)
  ubuntu@server:~$ ls -l /var/crash/
  total 2012
  -rw-r- 1 ubuntu ubuntu 2057124 Nov 22 08:22 
_usr_sbin_ipa-client-install.1000.crash
- ubuntu@server:~$ vi /var/log/syslog 
+ ubuntu@server:~$ vi /var/log/syslog
  ...
  Nov 22 08:22:33 server kernel: [  162.136131] User process fault: 
interruption code 003b ilc:2 in 
ext_dce.cpython-310-s390x-linux-gnu.so[3ff8b88+4000]
  Nov 22 08:22:33 server kernel: [  162.136153] Failing address: 
03ff23f0f000 TEID: 03ff23f0f800
  Nov 22 08:22:33 server kernel: [  162.136156] Fault in primary space mode 
while using user ASCE.
  Nov 22 08:22:33 server kernel: [  162.136160] AS:9f5581c7 
R3:0024
  Nov 22 08:22:33 server kernel: [  162.136166] CPU: 3 PID: 4294 Comm: 
ipa-client-inst Not tainted 5.15.0-89-generic #99-Ubuntu
  Nov 22 08:22:33 server kernel: [  162.136169] Hardware name: IBM 2964 N63 400 
(z/VM 6.4.0)
  Nov 22 08:22:33 server kernel: [  162.136170] User PSW : 070520018000 
03ff23f0f150
  Nov 22 08:22:33 server kernel: [  162.136173]R:0 T:1 IO:1 EX:1 
Key:0 M:1 W:0 P:1 AS:0 CC:2 PM:0 RI:0 EA:3
  Nov 22 08:22:33 server kernel: [  162.136176] User GPRS: 0f010043 
02aa242fb170 03ff8b885240 0600
  Nov 22 08:22:33 server kernel: [  162.136178]0080 
02aa242fb170 03ff8b882c00 03ff8bde6d70
  Nov 22 08:22:33 server kernel: [  162.136180]03ff8bd50450 
03ff8bdbc7b0 03ff8bd599b0 03ff8bd599e0
  Nov 22 08:22:33 server kernel: [  162.136182]03ff8c8b0f90 
03ff8bdbc7b0 02aa23f49cac 03ffe5c745c0
  Nov 22 08:22:33 server kernel: [  162.136189] User Code: Bad PSW.
  Nov 22 08:22:33 server kernel: [  162.136190] Last Breaking-Event-Address:
  Nov 22 08:22:33 server kernel: [  162.136190]  [<03ff8b882c06>] 
0x3ff8b882c06
  Nov 22 08:22:33 server systemd[986]: Started D-Bus User Message Bus.
  Nov 22 08:22:33 server dbus-daemon[4303]: [session uid=1000 pid=4303] 
AppArmor D-Bus mediation is enabled
  ...
  
  ProblemType: Bug
  DistroRelease: Ubuntu 22.04
  Package: freeipa-client 4.9.8-1
  ProcVersionSignature: Ubuntu 5.15.0-89.99-generic 5.15.126
  Uname: Linux 5.15.0-89-generic s390x
  ApportVersion: 2.20.11-0ubuntu82.5
  Architecture: s390x
  CasperMD5CheckResult: pass
  CloudArchitecture: s390x
  CloudID: none
  CloudName: none
  CloudPlatform: none
  CloudSubPlatform: config
  Date: Wed Nov 22 08:52:47 2023
  InstallationDate: Installed on 2023-11-22 (0 days ago)
  InstallationMedia: Ubuntu-Server 22.04.2 LTS "Jammy Jellyfish" - Release 
s390x (20230220.1)
  SourcePackage: freeipa
  UpgradeStatus: No upgrade log present (probably fresh install)
+ 
+ $ apt-cache policy freeipa-client
+ freeipa-client:
+   Installed: 4.9.8-1
+   Candidate: 4.9.8-1
+   Version table:
+  *** 4.9.8-1 500
+ 500 http://ports.ubuntu.com/ubuntu-ports jammy/universe s390x Packages
+ 100 /var/lib/dpkg/status

** Also affects: ubuntu-z-systems
   Importance: Undecided
   Status: New

** Changed in: ubuntu-z-systems
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/2044242

Title:
  ipa-client-install seg faults on 22.04.3 (s390x)

Status in Ubuntu on IBM z Systems:
  New
Status in freeipa package in Ubuntu:
  New

Bug description:
  Executing 'ipa-client-install' (package: freeipa-client) is causing a
  segmentation fault:

  ubuntu@server:~$ sudo apt install freeipa-client
  ubuntu@server:~$ ipa-client-install
  Segmentation fault (core dumped)
  ubuntu@server:~$ ls -l /var/crash/
  total 2012
  -rw-r- 1 ubuntu ubuntu 2057124 Nov 22 08:22 
_usr_sbin_ipa-client-install.1000.crash
  ubuntu@server:~$ vi /var/log/syslog
  ...
  Nov 22 08:22:33 server kernel: [  162.136131] User process fault: 
interruption code 003b ilc:2 in 
ext_dce.cpython-310-s390x-linux-gnu.so[3ff8b88+4000]
  Nov 22 08:22:33 server kernel: [  162.136153] Failing address: 
03ff23f0f000 TEID: 03ff23f0f800
  Nov 22 08:22:33 server kernel: [  162.136156] Fault in primary space mode 
while using user ASCE.
  Nov 22 08:22:33 server kernel: [  162.136160] AS:9f5581c7 
R3:0024
  Nov 22 08:22:33 server kernel: [  162.136166] CPU: 3 PID: 4294 Comm: 
ipa-client-inst Not tainted 5.15.0-89-generic #99-Ubuntu
  Nov 22 08:22:33 server kernel: [  162.136169] Hardware name: IBM 2964 N63 400 
(z/VM 6.4.0)
  Nov 22 08:22:33 server kernel: [  162.136170] User PSW : 070520018000 
03ff23f0f150
  Nov 22 08:22:33 server kernel: [  162.136173]R:0 T:1 IO:1 EX:1 
Key:0 M:1 W:0 P:1 AS:0 CC:2 PM:0 RI:0 EA:3
  Nov 22 08:22:33 server kernel

[Freeipa] [Bug 2044242] [NEW] ipa-client-install seg faults on 22.04.3 (s390x)

2023-11-22 Thread Frank Heimes

Public bug reported:

Executing 'ipa-client-install' (package: freeipa-client) is causing a
segmentation fault:

ubuntu@server:~$ sudo apt install freeipa-client
ubuntu@server:~$ ipa-client-install
Segmentation fault (core dumped)
ubuntu@server:~$ ls -l /var/crash/
total 2012
-rw-r- 1 ubuntu ubuntu 2057124 Nov 22 08:22 
_usr_sbin_ipa-client-install.1000.crash
ubuntu@server:~$ vi /var/log/syslog
...
Nov 22 08:22:33 server kernel: [  162.136131] User process fault: interruption 
code 003b ilc:2 in ext_dce.cpython-310-s390x-linux-gnu.so[3ff8b88+4000]
Nov 22 08:22:33 server kernel: [  162.136153] Failing address: 03ff23f0f000 
TEID: 03ff23f0f800
Nov 22 08:22:33 server kernel: [  162.136156] Fault in primary space mode while 
using user ASCE.
Nov 22 08:22:33 server kernel: [  162.136160] AS:9f5581c7 
R3:0024
Nov 22 08:22:33 server kernel: [  162.136166] CPU: 3 PID: 4294 Comm: 
ipa-client-inst Not tainted 5.15.0-89-generic #99-Ubuntu
Nov 22 08:22:33 server kernel: [  162.136169] Hardware name: IBM 2964 N63 400 
(z/VM 6.4.0)
Nov 22 08:22:33 server kernel: [  162.136170] User PSW : 070520018000 
03ff23f0f150
Nov 22 08:22:33 server kernel: [  162.136173]R:0 T:1 IO:1 EX:1 
Key:0 M:1 W:0 P:1 AS:0 CC:2 PM:0 RI:0 EA:3
Nov 22 08:22:33 server kernel: [  162.136176] User GPRS: 0f010043 
02aa242fb170 03ff8b885240 0600
Nov 22 08:22:33 server kernel: [  162.136178]0080 
02aa242fb170 03ff8b882c00 03ff8bde6d70
Nov 22 08:22:33 server kernel: [  162.136180]03ff8bd50450 
03ff8bdbc7b0 03ff8bd599b0 03ff8bd599e0
Nov 22 08:22:33 server kernel: [  162.136182]03ff8c8b0f90 
03ff8bdbc7b0 02aa23f49cac 03ffe5c745c0
Nov 22 08:22:33 server kernel: [  162.136189] User Code: Bad PSW.
Nov 22 08:22:33 server kernel: [  162.136190] Last Breaking-Event-Address:
Nov 22 08:22:33 server kernel: [  162.136190]  [<03ff8b882c06>] 
0x3ff8b882c06
Nov 22 08:22:33 server systemd[986]: Started D-Bus User Message Bus.
Nov 22 08:22:33 server dbus-daemon[4303]: [session uid=1000 pid=4303] AppArmor 
D-Bus mediation is enabled
...

ProblemType: Bug
DistroRelease: Ubuntu 22.04
Package: freeipa-client 4.9.8-1
ProcVersionSignature: Ubuntu 5.15.0-89.99-generic 5.15.126
Uname: Linux 5.15.0-89-generic s390x
ApportVersion: 2.20.11-0ubuntu82.5
Architecture: s390x
CasperMD5CheckResult: pass
CloudArchitecture: s390x
CloudID: none
CloudName: none
CloudPlatform: none
CloudSubPlatform: config
Date: Wed Nov 22 08:52:47 2023
InstallationDate: Installed on 2023-11-22 (0 days ago)
InstallationMedia: Ubuntu-Server 22.04.2 LTS "Jammy Jellyfish" - Release s390x 
(20230220.1)
SourcePackage: freeipa
UpgradeStatus: No upgrade log present (probably fresh install)

$ apt-cache policy freeipa-client
freeipa-client:
  Installed: 4.9.8-1
  Candidate: 4.9.8-1
  Version table:
 *** 4.9.8-1 500
500 http://ports.ubuntu.com/ubuntu-ports jammy/universe s390x Packages
100 /var/lib/dpkg/status

** Affects: freeipa (Ubuntu)
 Importance: High
 Status: New


** Tags: apport-bug jammy s390x uec-images

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/2044242

Title:
  ipa-client-install seg faults on 22.04.3 (s390x)

Status in freeipa package in Ubuntu:
  New

Bug description:
  Executing 'ipa-client-install' (package: freeipa-client) is causing a
  segmentation fault:

  ubuntu@server:~$ sudo apt install freeipa-client
  ubuntu@server:~$ ipa-client-install
  Segmentation fault (core dumped)
  ubuntu@server:~$ ls -l /var/crash/
  total 2012
  -rw-r- 1 ubuntu ubuntu 2057124 Nov 22 08:22 
_usr_sbin_ipa-client-install.1000.crash
  ubuntu@server:~$ vi /var/log/syslog
  ...
  Nov 22 08:22:33 server kernel: [  162.136131] User process fault: 
interruption code 003b ilc:2 in 
ext_dce.cpython-310-s390x-linux-gnu.so[3ff8b88+4000]
  Nov 22 08:22:33 server kernel: [  162.136153] Failing address: 
03ff23f0f000 TEID: 03ff23f0f800
  Nov 22 08:22:33 server kernel: [  162.136156] Fault in primary space mode 
while using user ASCE.
  Nov 22 08:22:33 server kernel: [  162.136160] AS:9f5581c7 
R3:0024
  Nov 22 08:22:33 server kernel: [  162.136166] CPU: 3 PID: 4294 Comm: 
ipa-client-inst Not tainted 5.15.0-89-generic #99-Ubuntu
  Nov 22 08:22:33 server kernel: [  162.136169] Hardware name: IBM 2964 N63 400 
(z/VM 6.4.0)
  Nov 22 08:22:33 server kernel: [  162.136170] User PSW : 070520018000 
03ff23f0f150
  Nov 22 08:22:33 server kernel: [  162.136173]R:0 T:1 IO:1 EX:1 
Key:0 M:1 W:0 P:1 AS:0 CC:2 PM:0 RI:0 EA:3
  Nov 22 08:22:33 server kernel: [  162.136176] User GPRS: 0f010043 
02aa242fb170 03ff8b885240 0600
  Nov 22 08:22:33 server kernel: [  162.136178]0080 
02aa242fb170 03ff8b882c00 03ff8bde6d70

[Freeipa] [Bug 1875114] Re: freeipa-server package missing on Ubuntu 20.04

2022-05-04 Thread Frank Heimes

Would it be possible for 22.10 instead?

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/1875114

Title:
  freeipa-server package missing on Ubuntu 20.04

Status in freeipa package in Ubuntu:
  Triaged
Status in libp11 package in Ubuntu:
  Fix Released
Status in softhsm2 package in Ubuntu:
  Fix Released

Bug description:
  previous releases of Ubuntu have freeipa-server package to install freeipa 
server
  but on 20.04 only client part can be found

  
  $ apt-cache search freeipa
  libipa-hbac-dev - FreeIPA HBAC Evaluator library -- development files
  libipa-hbac0 - FreeIPA HBAC Evaluator library
  libnss-sss - Nss library for the System Security Services Daemon
  libpam-sss - Pam module for the System Security Services Daemon
  python3-sss - Python3 module for the System Security Services Daemon
  sssd - System Security Services Daemon -- metapackage
  sssd-common - System Security Services Daemon -- common files
  sssd-tools - System Security Services Daemon -- tools
  cockpit-ws - Cockpit Web Service
  freeipa-client - FreeIPA centralized identity framework -- client
  freeipa-client-samba - FreeIPA centralized identity framework -- Samba client
  freeipa-common - FreeIPA centralized identity framework -- common files
  puppet-module-joshuabaird-ipaclient - Puppet module for Joshuabaird IPAclient
  python3-ipaclient - FreeIPA centralized identity framework -- Python3 modules 
for ipaclient
  python3-ipalib - FreeIPA centralized identity framework -- shared Python3 
modules
  python3-libipa-hbac - Python3 bindings for the FreeIPA HBAC Evaluator library

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1875114/+subscriptions


___
Mailing list: https://launchpad.net/~freeipa
Post to : freeipa@lists.launchpad.net
Unsubscribe : https://launchpad.net/~freeipa
More help   : https://help.launchpad.net/ListHelp

[Freeipa] [Bug 1769631] Re: freeipa-server installatio/configuration problem for s390x

2018-05-07 Thread Frank Heimes

, line 
424, in __runner
  step()
File "/usr/lib/python2.7/dist-packages/ipapython/install/core.py", line 
421, in 
  step = lambda: next(self.__gen)
File "/usr/lib/python2.7/dist-packages/ipapython/install/util.py", line 81, 
in run_generator_with_yield_from
  six.reraise(*exc_info)
File "/usr/lib/python2.7/dist-packages/ipapython/install/util.py", line 59, 
in run_generator_with_yield_from
  value = gen.send(prev_value)
File "/usr/lib/python2.7/dist-packages/ipapython/install/common.py", line 
65, in _install
  for unused in self._installer(self.parent):
File 
"/usr/lib/python2.7/dist-packages/ipaserver/install/server/__init__.py", line 
581, in main
  master_install(self)
File 
"/usr/lib/python2.7/dist-packages/ipaserver/install/server/install.py", line 
252, in decorated
  func(installer)
File 
"/usr/lib/python2.7/dist-packages/ipaserver/install/server/install.py", line 
800, in install
  setup_pkinit=not options.no_pkinit)
File "/usr/lib/python2.7/dist-packages/ipaserver/install/dsinstance.py", 
line 345, in create_instance
  self.start_creation(runtime=30)
File "/usr/lib/python2.7/dist-packages/ipaserver/install/service.py", line 
555, in start_creation
  run_step(full_msg, method)
File "/usr/lib/python2.7/dist-packages/ipaserver/install/service.py", line 
541, in run_step
  method()
File "/usr/lib/python2.7/dist-packages/ipaserver/install/dsinstance.py", 
line 669, in __start_instance
  self.start(self.serverid)
File "/usr/lib/python2.7/dist-packages/ipaserver/install/dsinstance.py", 
line 644, in start
  api.Backend.ldap2.connect()
File "/usr/lib/python2.7/dist-packages/ipalib/backend.py", line 69, in 
connect
  conn = self.create_connection(*args, **kw)
File "/usr/lib/python2.7/dist-packages/ipaserver/plugins/ldap2.py", line 
179, in create_connection
  client_controls=clientctrls)
File "/usr/lib/python2.7/dist-packages/ipapython/ipaldap.py", line 1153, in 
external_bind
  '', auth_tokens, server_controls, client_controls)
File "/usr/lib/python2.7/contextlib.py", line 35, in __exit__
  self.gen.throw(type, value, traceback)
File "/usr/lib/python2.7/dist-packages/ipapython/ipaldap.py", line 1066, in 
error_handler
  raise errors.ACIError(info='%s (%s)' % (info,desc))

  2018-04-26T14:31:25Z DEBUG The ipa-server-install command failed, exception: 
ACIError: Insufficient access: SASL(-4): no mechanism available: No worthy 
mechs found (Unknown authentication method)
  2018-04-26T14:31:25Z ERROR Insufficient access: SASL(-4): no mechanism 
available: No worthy mechs found (Unknown authentication method)
  2018-04-26T14:31:25Z ERROR The ipa-server-install command failed. See 
/var/log/ipaserver-install.log for more information
  root@fipas1:~# 

  
  Suggestions?

  [reply] [-]
  Comment 19 bugproxy bugproxy 2018-05-02 03:18:57 CDT

  ### External Comment ###
  

  --- Comment From frank-heimes 2018-05-02 13:25:26 UTC---
  Please could you attach the logs like the /var/log/syslog as well as the ipa 
install log:
  /var/log/ipaserver-install.log
  and in case available any other ipa related logs, too - means: /var/log/ipa*

  And also share how the content of the folder: ls -la /etc/ipa/

  Thx

  [reply] [-]
  Comment 20 Richard G. Young 2018-05-02 08:49:59 CDT

  
  free IPA install failure logs

  
  Requested logs attached in TAR

  Add Comment

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1769631/+subscriptions

___
Mailing list: https://launchpad.net/~freeipa
Post to : freeipa@lists.launchpad.net
Unsubscribe : https://launchpad.net/~freeipa
More help   : https://help.launchpad.net/ListHelp

[Freeipa] [Bug 1764744] Re: Support of freeipa-server for s390x

2018-05-02 Thread Frank Heimes

Please could you attach the logs like the /var/log/syslog as well as the ipa 
install log:
/var/log/ipaserver-install.log
and in case available any other ipa related logs, too - means: /var/log/ipa*

And also share how the content of the folder: ls -la /etc/ipa/

Thx

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/1764744

Title:
  Support of freeipa-server for s390x

Status in Ubuntu on IBM z Systems:
  Fix Released
Status in 389-ds-base package in Ubuntu:
  Fix Released
Status in freeipa package in Ubuntu:
  Fix Released

Bug description:
  freeipa fails to configure on s390x.   (Configuration being handled by
  the freeipa-server-install script)This script has two failure
  points.   The first is below:

  https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1600634
  describes a known bug but it was only resolved for x86_64.

  In the falling scenario the install log will have entries like the
  following:

  2018-04-10T18:53:01Z DEBUG nsslapd-pluginenabled:
  2018-04-10T18:53:01Z DEBUG  on
  2018-04-10T18:53:01Z DEBUG nsslapd-pluginpath:
  2018-04-10T18:53:01Z DEBUG  
/usr/lib/x86_64-linux-gnu/dirsrv/plugins/schemacompat-plugin.so
  2018-04-10T18:53:01Z DEBUG nsslapd-pluginversion:
  2018-04-10T18:53:01Z DEBUG  0.8

  
  Obviously on s390x 
/usr/lib/x86_64-linux-gnu/dirsrv/plugins/schemacompat-plugin.so will never be 
found.

  Now if I create a symbolic link with the above name that is linked to
  the same location but with s390x where x86_64 is located, the install
  will proceed past this failing location.

  The second failure point in the freeipa-server-install script is near
  the end, after the script has completed the freeipa-server-install and
  where it attempts to install the freeipa-client.  The client install
  appears to fail because of a problem with certificates related to the
  server install.

  2018-04-17T12:14:59Z ERROR Cannot connect to the server due to generic
  error: Insufficient access: SASL(-4): no mechanism available: No
  worthy mechs found (Unknown authentication method)

  The above appears to be related to an issue with the key database

  # certutil -L
  certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key 
database is in an old, unsupported format.

  # ipa cert-show 1
  ipa: ERROR: cannot connect to 'https://fipas1.pdl.pok.ibm.com/ipa/json': 
(SEC_ERROR_LEGACY_DATABASE) The certificate/key database is in an old, 
unsupported format.

  # ipa user-add 
  First name: Richard 
  >>> First name: Leading and trailing spaces are not allowed
  First name: Richard
  Last name: Young
  User login [ryoung]: ryoung1
  ipa: ERROR: cannot connect to 'https://fipas1.pdl.pok.ibm.com/ipa/json': 
(SEC_ERROR_LEGACY_DATABASE) The certificate/key database is in an old, 
unsupported format.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1764744/+subscriptions

___
Mailing list: https://launchpad.net/~freeipa
Post to : freeipa@lists.launchpad.net
Unsubscribe : https://launchpad.net/~freeipa
More help   : https://help.launchpad.net/ListHelp

[Freeipa] [Bug 1764744] Re: Support of freeipa-server for s390x

2018-04-17 Thread Frank Heimes

** Changed in: ubuntu-z-systems
   Status: Triaged => Fix Released

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/1764744

Title:
  Support of freeipa-server for s390x

Status in Ubuntu on IBM z Systems:
  Fix Released
Status in freeipa package in Ubuntu:
  Fix Released

Bug description:
  freeipa fails to configure on s390x.   (Configuration being handled by
  the freeipa-server-install script)This script has two failure
  points.   The first is below:

  https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1600634
  describes a known bug but it was only resolved for x86_64.

  In the falling scenario the install log will have entries like the
  following:

  2018-04-10T18:53:01Z DEBUG nsslapd-pluginenabled:
  2018-04-10T18:53:01Z DEBUG  on
  2018-04-10T18:53:01Z DEBUG nsslapd-pluginpath:
  2018-04-10T18:53:01Z DEBUG  
/usr/lib/x86_64-linux-gnu/dirsrv/plugins/schemacompat-plugin.so
  2018-04-10T18:53:01Z DEBUG nsslapd-pluginversion:
  2018-04-10T18:53:01Z DEBUG  0.8

  
  Obviously on s390x 
/usr/lib/x86_64-linux-gnu/dirsrv/plugins/schemacompat-plugin.so will never be 
found.

  Now if I create a symbolic link with the above name that is linked to
  the same location but with s390x where x86_64 is located, the install
  will proceed past this failing location.

  The second failure point in the freeipa-server-install script is near
  the end, after the script has completed the freeipa-server-install and
  where it attempts to install the freeipa-client.  The client install
  appears to fail because of a problem with certificates related to the
  server install.

  2018-04-17T12:14:59Z ERROR Cannot connect to the server due to generic
  error: Insufficient access: SASL(-4): no mechanism available: No
  worthy mechs found (Unknown authentication method)

  The above appears to be related to an issue with the key database

  # certutil -L
  certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key 
database is in an old, unsupported format.

  # ipa cert-show 1
  ipa: ERROR: cannot connect to 'https://fipas1.pdl.pok.ibm.com/ipa/json': 
(SEC_ERROR_LEGACY_DATABASE) The certificate/key database is in an old, 
unsupported format.

  # ipa user-add 
  First name: Richard 
  >>> First name: Leading and trailing spaces are not allowed
  First name: Richard
  Last name: Young
  User login [ryoung]: ryoung1
  ipa: ERROR: cannot connect to 'https://fipas1.pdl.pok.ibm.com/ipa/json': 
(SEC_ERROR_LEGACY_DATABASE) The certificate/key database is in an old, 
unsupported format.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1764744/+subscriptions

___
Mailing list: https://launchpad.net/~freeipa
Post to : freeipa@lists.launchpad.net
Unsubscribe : https://launchpad.net/~freeipa
More help   : https://help.launchpad.net/ListHelp

[Freeipa] [Bug 1764744] Re: Support of freeipa-server for s390x

2018-04-17 Thread Frank Heimes

Because of the "targetmilestone-inin1604" tag (that's synch-ed over by
'bugproxy') this problem seem to occur on Xenial.

** Tags added: universe

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/1764744

Title:
  Support of freeipa-server for s390x

Status in Ubuntu on IBM z Systems:
  Triaged
Status in freeipa package in Ubuntu:
  Incomplete

Bug description:
  freeipa fails to configure on s390x.   (Configuration being handled by
  the freeipa-server-install script)This script has two failure
  points.   The first is below:

  https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1600634
  describes a known bug but it was only resolved for x86_64.

  In the falling scenario the install log will have entries like the
  following:

  2018-04-10T18:53:01Z DEBUG nsslapd-pluginenabled:
  2018-04-10T18:53:01Z DEBUG  on
  2018-04-10T18:53:01Z DEBUG nsslapd-pluginpath:
  2018-04-10T18:53:01Z DEBUG  
/usr/lib/x86_64-linux-gnu/dirsrv/plugins/schemacompat-plugin.so
  2018-04-10T18:53:01Z DEBUG nsslapd-pluginversion:
  2018-04-10T18:53:01Z DEBUG  0.8

  
  Obviously on s390x 
/usr/lib/x86_64-linux-gnu/dirsrv/plugins/schemacompat-plugin.so will never be 
found.

  Now if I create a symbolic link with the above name that is linked to
  the same location but with s390x where x86_64 is located, the install
  will proceed past this failing location.

  The second failure point in the freeipa-server-install script is near
  the end, after the script has completed the freeipa-server-install and
  where it attempts to install the freeipa-client.  The client install
  appears to fail because of a problem with certificates related to the
  server install.

  2018-04-17T12:14:59Z ERROR Cannot connect to the server due to generic
  error: Insufficient access: SASL(-4): no mechanism available: No
  worthy mechs found (Unknown authentication method)

  The above appears to be related to an issue with the key database

  # certutil -L
  certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key 
database is in an old, unsupported format.

  # ipa cert-show 1
  ipa: ERROR: cannot connect to 'https://fipas1.pdl.pok.ibm.com/ipa/json': 
(SEC_ERROR_LEGACY_DATABASE) The certificate/key database is in an old, 
unsupported format.

  # ipa user-add 
  First name: Richard 
  >>> First name: Leading and trailing spaces are not allowed
  First name: Richard
  Last name: Young
  User login [ryoung]: ryoung1
  ipa: ERROR: cannot connect to 'https://fipas1.pdl.pok.ibm.com/ipa/json': 
(SEC_ERROR_LEGACY_DATABASE) The certificate/key database is in an old, 
unsupported format.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1764744/+subscriptions

___
Mailing list: https://launchpad.net/~freeipa
Post to : freeipa@lists.launchpad.net
Unsubscribe : https://launchpad.net/~freeipa
More help   : https://help.launchpad.net/ListHelp

[Freeipa] [Bug 1764744] Re: Support of freeipa-server for s390x

2018-04-17 Thread Frank Heimes

** Also affects: ubuntu-z-systems
   Importance: Undecided
   Status: New

** Changed in: ubuntu-z-systems
   Status: New => Triaged

** Changed in: ubuntu-z-systems
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/1764744

Title:
  Support of freeipa-server for s390x

Status in Ubuntu on IBM z Systems:
  Triaged
Status in freeipa package in Ubuntu:
  New

Bug description:
  freeipa fails to configure on s390x.   (Configuration being handled by
  the freeipa-server-install script)This script has two failure
  points.   The first is below:

  https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1600634
  describes a known bug but it was only resolved for x86_64.

  In the falling scenario the install log will have entries like the
  following:

  2018-04-10T18:53:01Z DEBUG nsslapd-pluginenabled:
  2018-04-10T18:53:01Z DEBUG  on
  2018-04-10T18:53:01Z DEBUG nsslapd-pluginpath:
  2018-04-10T18:53:01Z DEBUG  
/usr/lib/x86_64-linux-gnu/dirsrv/plugins/schemacompat-plugin.so
  2018-04-10T18:53:01Z DEBUG nsslapd-pluginversion:
  2018-04-10T18:53:01Z DEBUG  0.8

  
  Obviously on s390x 
/usr/lib/x86_64-linux-gnu/dirsrv/plugins/schemacompat-plugin.so will never be 
found.

  Now if I create a symbolic link with the above name that is linked to
  the same location but with s390x where x86_64 is located, the install
  will proceed past this failing location.

  The second failure point in the freeipa-server-install script is near
  the end, after the script has completed the freeipa-server-install and
  where it attempts to install the freeipa-client.  The client install
  appears to fail because of a problem with certificates related to the
  server install.

  2018-04-17T12:14:59Z ERROR Cannot connect to the server due to generic
  error: Insufficient access: SASL(-4): no mechanism available: No
  worthy mechs found (Unknown authentication method)

  The above appears to be related to an issue with the key database

  # certutil -L
  certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key 
database is in an old, unsupported format.

  # ipa cert-show 1
  ipa: ERROR: cannot connect to 'https://fipas1.pdl.pok.ibm.com/ipa/json': 
(SEC_ERROR_LEGACY_DATABASE) The certificate/key database is in an old, 
unsupported format.

  # ipa user-add 
  First name: Richard 
  >>> First name: Leading and trailing spaces are not allowed
  First name: Richard
  Last name: Young
  User login [ryoung]: ryoung1
  ipa: ERROR: cannot connect to 'https://fipas1.pdl.pok.ibm.com/ipa/json': 
(SEC_ERROR_LEGACY_DATABASE) The certificate/key database is in an old, 
unsupported format.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1764744/+subscriptions

___
Mailing list: https://launchpad.net/~freeipa
Post to : freeipa@lists.launchpad.net
Unsubscribe : https://launchpad.net/~freeipa
More help   : https://help.launchpad.net/ListHelp

[Freeipa] [Bug 1764744] Re: Support of freeipa-server for s390x

2018-04-17 Thread Frank Heimes

** Package changed: linux (Ubuntu) => freeipa (Ubuntu)

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/1764744

Title:
  Support of freeipa-server for s390x

Status in Ubuntu on IBM z Systems:
  Triaged
Status in freeipa package in Ubuntu:
  New

Bug description:
  freeipa fails to configure on s390x.   (Configuration being handled by
  the freeipa-server-install script)This script has two failure
  points.   The first is below:

  https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1600634
  describes a known bug but it was only resolved for x86_64.

  In the falling scenario the install log will have entries like the
  following:

  2018-04-10T18:53:01Z DEBUG nsslapd-pluginenabled:
  2018-04-10T18:53:01Z DEBUG  on
  2018-04-10T18:53:01Z DEBUG nsslapd-pluginpath:
  2018-04-10T18:53:01Z DEBUG  
/usr/lib/x86_64-linux-gnu/dirsrv/plugins/schemacompat-plugin.so
  2018-04-10T18:53:01Z DEBUG nsslapd-pluginversion:
  2018-04-10T18:53:01Z DEBUG  0.8

  
  Obviously on s390x 
/usr/lib/x86_64-linux-gnu/dirsrv/plugins/schemacompat-plugin.so will never be 
found.

  Now if I create a symbolic link with the above name that is linked to
  the same location but with s390x where x86_64 is located, the install
  will proceed past this failing location.

  The second failure point in the freeipa-server-install script is near
  the end, after the script has completed the freeipa-server-install and
  where it attempts to install the freeipa-client.  The client install
  appears to fail because of a problem with certificates related to the
  server install.

  2018-04-17T12:14:59Z ERROR Cannot connect to the server due to generic
  error: Insufficient access: SASL(-4): no mechanism available: No
  worthy mechs found (Unknown authentication method)

  The above appears to be related to an issue with the key database

  # certutil -L
  certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key 
database is in an old, unsupported format.

  # ipa cert-show 1
  ipa: ERROR: cannot connect to 'https://fipas1.pdl.pok.ibm.com/ipa/json': 
(SEC_ERROR_LEGACY_DATABASE) The certificate/key database is in an old, 
unsupported format.

  # ipa user-add 
  First name: Richard 
  >>> First name: Leading and trailing spaces are not allowed
  First name: Richard
  Last name: Young
  User login [ryoung]: ryoung1
  ipa: ERROR: cannot connect to 'https://fipas1.pdl.pok.ibm.com/ipa/json': 
(SEC_ERROR_LEGACY_DATABASE) The certificate/key database is in an old, 
unsupported format.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1764744/+subscriptions

___
Mailing list: https://launchpad.net/~freeipa
Post to : freeipa@lists.launchpad.net
Unsubscribe : https://launchpad.net/~freeipa
More help   : https://help.launchpad.net/ListHelp

[Freeipa] [Bug 2044242] Re: ipa-client-install seg faults (s390x)

[Freeipa] [Bug 2044242] Re: ipa-client-install seg faults (s390x)

[Freeipa] [Bug 2044242] Re: ipa-client-install seg faults (s390x)

[Freeipa] [Bug 2044242] Re: ipa-client-install seg faults (s390x)

[Freeipa] [Bug 2044242] Re: ipa-client-install seg faults (s390x)

[Freeipa] [Bug 2044242] Re: ipa-client-install seg faults on 22.04.3 (s390x)

[Freeipa] [Bug 2044242] [NEW] ipa-client-install seg faults on 22.04.3 (s390x)

[Freeipa] [Bug 1875114] Re: freeipa-server package missing on Ubuntu 20.04

[Freeipa] [Bug 1769631] Re: freeipa-server installatio/configuration problem for s390x

[Freeipa] [Bug 1764744] Re: Support of freeipa-server for s390x

[Freeipa] [Bug 1764744] Re: Support of freeipa-server for s390x

[Freeipa] [Bug 1764744] Re: Support of freeipa-server for s390x

[Freeipa] [Bug 1764744] Re: Support of freeipa-server for s390x

[Freeipa] [Bug 1764744] Re: Support of freeipa-server for s390x

14 matches

Site Navigation

Mail list logo

Footer information