Search Mailing List Archives


Limit search to: Subject & Body Subject Author
Sort by: Reverse Sort
Limit to: All This Week Last Week This Month Last Month
Select Date Range     through    

Apache child segfaults when enabling mod_webauthldap.

Mustafa A. Hashmi mahashmi at gmail.com
Fri Feb 24 22:40:39 PST 2006


On 2/25/06, Mustafa A. Hashmi <mahashmi at gmail.com> wrote:
> > Second, could you try ltrace instead of strace, or even better, get a
> > backtrace from the core dump using gdb?

I remember compiling kerberos with the following options on this machine:

./configure --with-system-et LDFLAGS=-L/usr/lib/et CPPFLAGS=-I/usr/include/et

I recompiled kerberos without these flags and webauth and webauthldap
both reported missing libcom_err libraries when I ran ldd against the
modules.

I linked them manually and started apache -- this time, webauthldap
logs a lot more (for whatever reason -- no configuration directive was
changed):

Please see apache log below:

--- start apache log --

[Sat Feb 25 11:24:57 2006] [info] Initial (No.1) HTTPS request
received for child 0 (server ldap1.emergen.biz:443)
[Sat Feb 25 11:24:57 2006] [debug] mod_webauth.c(2342): mod_webauth:
in check_user_id hook(/admin/)
[Sat Feb 25 11:24:57 2006] [debug] mod_webauth.c(1769): mod_webauth:
check_url: found  WEBAUTHR
[Sat Feb 25 11:24:57 2006] [debug] mod_webauth.c(1572): mod_webauth:
handle_id_token: got subject(mustafa.hashmi) from id token
[Sat Feb 25 11:24:57 2006] [debug] mod_webauth.c(2376): mod_webauth:
stash note, user(mustafa.hashmi)
[Sat Feb 25 11:24:57 2006] [debug] mod_webauth.c(2399): mod_webauth:
check_user_id_hook setting user(mustafa.hashmi)
[Sat Feb 25 11:24:57 2006] [warn] mod_webauth: mwa_setenv:
(WEBAUTH_USER) (mustafa.hashmi)\n
[Sat Feb 25 11:24:57 2006] [warn] mod_webauth: mwa_setenv:
(WEBAUTH_TOKEN_EXPIRATION) (1140882396)\n
[Sat Feb 25 11:24:57 2006] [warn] mod_webauth: mwa_setenv:
(WEBAUTH_TOKEN_CREATION) (1140848697)\n
[Sat Feb 25 11:24:57 2006] [debug] mod_webauth.c(2452): mod_webauth:
check_user_id_hook: no_cache(0) dont_cache(0) dont_cache_ex(0)
[Sat Feb 25 11:24:57 2006] [info] webauthldap: invoked for user mustafa.hashmi
[Sat Feb 25 11:24:57 2006] [info] webauthldap(mustafa.hashmi): filter
template is uid=USER
[Sat Feb 25 11:24:57 2006] [info] webauthldap(mustafa.hashmi): filter
is uid=mustafa.hashmi
[Sat Feb 25 11:24:57 2006] [info] webauthldap(mustafa.hashmi): conf
attribute to put into env: mail
[Sat Feb 25 11:24:57 2006] [info] webauthldap(mustafa.hashmi): conf
attribute to put into env: displayname
[Sat Feb 25 11:24:57 2006] [info] webauthldap(mustafa.hashmi):
initialized sucessfully
[Sat Feb 25 11:24:57 2006] [info] webauthldap(mustafa.hashmi): begins ldap bind
[Sat Feb 25 11:24:57 2006] [info] webauthldap(mustafa.hashmi): set
ticket to KRB5CCNAME=FILE:/tmp/krb5cc_ldap

-- end apache log --

At this point, the child segfaults.

Please find below the backtrace:

-- backtrace --
(gdb) set args -X -k start -DSSL
(gdb) run
Starting program: /usr/local/apache2/bin/httpd -X -k start -DSSL
[Thread debugging using libthread_db enabled]
[New Thread 1077082784 (LWP 9311)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1077082784 (LWP 9311)]
0x40605f73 in com_right () from /usr/lib/libkrb5.so.17
(gdb) bt
#0  0x40605f73 in com_right () from /usr/lib/libkrb5.so.17
#1  0x405e68c0 in krb5_get_err_text () from /usr/lib/libkrb5.so.17
#2  0x405cb796 in gss_display_status () from /usr/lib/libgssapi.so.1
#3  0x405b890f in sasl_gss_seterror_ () from /usr/lib/sasl2/libgssapiv2.so.2
#4  0x405b94c5 in gssapi_client_mech_step () from
/usr/lib/sasl2/libgssapiv2.so.2
#5  0x4048ab22 in sasl_client_step () from /usr/lib/libsasl2.so.2
#6  0x081ce600 in ?? ()
#7  0x00000000 in ?? ()
#8  0x00000000 in ?? ()
#9  0xbffff0dc in ?? ()
#10 0xbffff0ec in ?? ()
#11 0xbffff0e0 in ?? ()
#12 0x081ce338 in ?? ()
#13 0x7061646c in ?? ()
#14 0x4027e1c5 in strcasecmp () from /lib/tls/libc.so.6
Previous frame inner to this frame (corrupt stack?)

-- end backtrace --

Please note: the backtrace shown above matches the backtrace I got
before I recompiled kerberos!

Thanks & regards,
--
Mustafa A. Hashmi
mahashmi at gmail.com
mh at stderr.net



More information about the webauth-info mailing list