Steffen Blume wrote:
Rich Megginson wrote:
Steffen Blume wrote:
Hello,
my admin server (apache/httpd.worker) is not starting under /OpenSolaris/ (/SunOS 5.11/). I added the error log below. Log level is debug. The only error msg is the last line from nss. I compiled 389 DS by myself. Versions: nss-3.12.4-with-nspr-4.8 389-ds-base-1.2.4 mod_nss-1.0.8 adminutil-1.1.8 389-admin-1.1.9
[Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2419): Entering mod_admserv_post_config - pid is [6597] init count is [0] [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2248): Entering do_admserv_post_config - pid is [6597] [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2256): Entering do_admserv_post_config - init count is [1] [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2280): [6597] Cache expiration set to 600 seconds [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2383): Added StartConfigDs task entry [cn=startconfigds,cn=operation,cn=tasks,cn=admin-serv-ldap,cn=389 administration server,cn=server group,cn=ldap.mydomain.de,ou=mydomain.de,o=netscaperoot:start_config_ds:]
for user [LocalSuper] [Wed Jan 06 11:13:55 2010] [notice] Access Host filter is: *.mst.uni-hannover.de [Wed Jan 06 11:13:55 2010] [notice] Access Address filter is: * [Wed Jan 06 11:13:55 2010] [info] mod_unique_id: using ip addr xxx.xxx.xxx.xxx Assertion failure: SECSuccess == rv, at sslnonce.c:156
Do you have a core file for admin server?
No. It terminates without crashing.
If not, can you run the admin server using a debugger?
Just tried it with gdb. But gdb prints an internal error (and crashes):
elfread.c:366: internal-error: sect_index_data not initialized A problem internal to GDB has been detected, further debugging may prove unreliable. Quit this debugging session? (y or n) n elfread.c:366: internal-error: sect_index_data not initialized A problem internal to GDB has been detected, further debugging may prove unreliable.
I looked at the nss source code, where the error occurs. Somehow the function NSS_RegisterShutdown is called before NSS is initialized and returns an error. I think this happens indirectly in mod_nss!?
Which compiler did you use? gcc or the free Sun compiler? If the latter, I don't think gdb will work - you'll have to use the Sun debugger (dbx?)
Both mod_nss and mod_admserv perform NSS initialization. mod_nss should be loaded first, then mod_admserv.
Any advice?
Regards, Steffen
Rich Megginson wrote:
Steffen Blume wrote:
Rich Megginson wrote:
Steffen Blume wrote:
Hello,
my admin server (apache/httpd.worker) is not starting under /OpenSolaris/ (/SunOS 5.11/). I added the error log below. Log level is debug. The only error msg is the last line from nss. I compiled 389 DS by myself. Versions: nss-3.12.4-with-nspr-4.8 389-ds-base-1.2.4 mod_nss-1.0.8 adminutil-1.1.8 389-admin-1.1.9
[Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2419): Entering mod_admserv_post_config - pid is [6597] init count is [0] [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2248): Entering do_admserv_post_config - pid is [6597] [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2256): Entering do_admserv_post_config - init count is [1] [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2280): [6597] Cache expiration set to 600 seconds [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2383): Added StartConfigDs task entry [cn=startconfigds,cn=operation,cn=tasks,cn=admin-serv-ldap,cn=389 administration server,cn=server group,cn=ldap.mydomain.de,ou=mydomain.de,o=netscaperoot:start_config_ds:]
for user [LocalSuper] [Wed Jan 06 11:13:55 2010] [notice] Access Host filter is: *.mst.uni-hannover.de [Wed Jan 06 11:13:55 2010] [notice] Access Address filter is: * [Wed Jan 06 11:13:55 2010] [info] mod_unique_id: using ip addr xxx.xxx.xxx.xxx Assertion failure: SECSuccess == rv, at sslnonce.c:156
Do you have a core file for admin server?
No. It terminates without crashing.
If not, can you run the admin server using a debugger?
Just tried it with gdb. But gdb prints an internal error (and crashes):
elfread.c:366: internal-error: sect_index_data not initialized A problem internal to GDB has been detected, further debugging may prove unreliable. Quit this debugging session? (y or n) n elfread.c:366: internal-error: sect_index_data not initialized A problem internal to GDB has been detected, further debugging may prove unreliable.
I looked at the nss source code, where the error occurs. Somehow the function NSS_RegisterShutdown is called before NSS is initialized and returns an error. I think this happens indirectly in mod_nss!?
Which compiler did you use? gcc or the free Sun compiler? If the latter, I don't think gdb will work - you'll have to use the Sun debugger (dbx?)
dbx works. I used gcc with Sun assembler.
Both mod_nss and mod_admserv perform NSS initialization. mod_nss should be loaded first, then mod_admserv.
dbx displays the loaded modules. mod_nss is loaded before mod_admserv.
After some debugging and studying the sources, I found out that ssl is apparently disabled in my config. Used the default one. Just called start-ds-admin. Because of ssl being disabled nss gets not initialized. Found this one in the changelog of mod_nss: -------------------------------- 2006-10-17 Rob Crittenden rcritten@redhat.com
* mod_nss 1.0.5 * Fix for a minor problem introduced with 1.0.4. NSS_Shutdown() was being called during module unload even if SSL wasn't enabled causing an error to display in the log. -------------------------------- In mod_admserv the function SSL_ClearSessionCache() is called without checking if ssl is enabled.
I setup and enabled ssl. Now it works. Wow. That misconfiguration was hard to find.
Thanks for ur help.
Any advice?
Regards, Steffen
-- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users
Steffen Blume wrote:
Rich Megginson wrote:
Steffen Blume wrote:
Rich Megginson wrote:
Steffen Blume wrote:
Hello,
my admin server (apache/httpd.worker) is not starting under /OpenSolaris/ (/SunOS 5.11/). I added the error log below. Log level is debug. The only error msg is the last line from nss. I compiled 389 DS by myself. Versions: nss-3.12.4-with-nspr-4.8 389-ds-base-1.2.4 mod_nss-1.0.8 adminutil-1.1.8 389-admin-1.1.9
[Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2419): Entering mod_admserv_post_config - pid is [6597] init count is [0] [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2248): Entering do_admserv_post_config - pid is [6597] [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2256): Entering do_admserv_post_config - init count is [1] [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2280): [6597] Cache expiration set to 600 seconds [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2383): Added StartConfigDs task entry [cn=startconfigds,cn=operation,cn=tasks,cn=admin-serv-ldap,cn=389 administration server,cn=server group,cn=ldap.mydomain.de,ou=mydomain.de,o=netscaperoot:start_config_ds:]
for user [LocalSuper] [Wed Jan 06 11:13:55 2010] [notice] Access Host filter is: *.mst.uni-hannover.de [Wed Jan 06 11:13:55 2010] [notice] Access Address filter is: * [Wed Jan 06 11:13:55 2010] [info] mod_unique_id: using ip addr xxx.xxx.xxx.xxx Assertion failure: SECSuccess == rv, at sslnonce.c:156
Do you have a core file for admin server?
No. It terminates without crashing.
If not, can you run the admin server using a debugger?
Just tried it with gdb. But gdb prints an internal error (and crashes):
elfread.c:366: internal-error: sect_index_data not initialized A problem internal to GDB has been detected, further debugging may prove unreliable. Quit this debugging session? (y or n) n elfread.c:366: internal-error: sect_index_data not initialized A problem internal to GDB has been detected, further debugging may prove unreliable.
I looked at the nss source code, where the error occurs. Somehow the function NSS_RegisterShutdown is called before NSS is initialized and returns an error. I think this happens indirectly in mod_nss!?
Which compiler did you use? gcc or the free Sun compiler? If the latter, I don't think gdb will work - you'll have to use the Sun debugger (dbx?)
dbx works. I used gcc with Sun assembler.
Both mod_nss and mod_admserv perform NSS initialization. mod_nss should be loaded first, then mod_admserv.
dbx displays the loaded modules. mod_nss is loaded before mod_admserv.
After some debugging and studying the sources, I found out that ssl is apparently disabled in my config. Used the default one. Just called start-ds-admin. Because of ssl being disabled nss gets not initialized. Found this one in the changelog of mod_nss:
2006-10-17 Rob Crittenden rcritten@redhat.com
* mod_nss 1.0.5 * Fix for a minor problem introduced with 1.0.4. NSS_Shutdown() wasbeing called during module unload even if SSL wasn't enabled causing an error to display in the log.
In mod_admserv the function SSL_ClearSessionCache() is called without checking if ssl is enabled.
I setup and enabled ssl. Now it works. Wow. That misconfiguration was hard to find.
Please file a bug against 389 to fix the SSL_ClearSessionCache() problem. Thanks!
Thanks for ur help.
Any advice?
Regards, Steffen
-- 389 users mailing list 389-users@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users
389-users@lists.fedoraproject.org
-
Rich Megginson -
Steffen Blume