Re: [389-users] (Solved)Re: admin server under solaris not running

[Rich Megginson]

Steffen Blume wrote:
> Rich Megginson wrote:
> > Steffen Blume wrote:
> > > Rich Megginson wrote:
> > > > Steffen Blume wrote:
> > > > > Hello,
> > > > >
> > > > > my admin server (apache/httpd.worker) is not starting under
> > > > > /OpenSolaris/ (/SunOS 5.11/).
> > > > > I added the error log below. Log level is debug. The only error msg is
> > > > > the last line from nss. I compiled 389 DS by myself.
> > > > > Versions:
> > > > > nss-3.12.4-with-nspr-4.8
> > > > > 389-ds-base-1.2.4
> > > > > mod_nss-1.0.8
> > > > > adminutil-1.1.8
> > > > > 389-admin-1.1.9
> > > > >
> > > > > [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2419): Entering
> > > > > mod_admserv_post_config - pid is [6597] init count is [0]
> > > > > [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2248): Entering
> > > > > do_admserv_post_config - pid is [6597]
> > > > > [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2256): Entering
> > > > > do_admserv_post_config - init count is [1]
> > > > > [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2280): [6597] Cache
> > > > > expiration set to 600 seconds
> > > > > [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2383): Added
> > > > > StartConfigDs task entry
> > > > > [cn=startconfigds,cn=operation,cn=tasks,cn=admin-serv-ldap,cn=389
> > > > > administration server,cn=server
> > > > > group,cn=ldap.mydomain.de,ou=mydomain.de,o=netscaperoot:start_config_ds:]
> > > > >
> > > > > for user [LocalSuper]
> > > > > [Wed Jan 06 11:13:55 2010] [notice] Access Host filter is:
> > > > > *.mst.uni-hannover.de
> > > > > [Wed Jan 06 11:13:55 2010] [notice] Access Address filter is: *
> > > > > [Wed Jan 06 11:13:55 2010] [info] mod_unique_id: using ip addr
> > > > > xxx.xxx.xxx.xxx
> > > > > Assertion failure: SECSuccess == rv, at sslnonce.c:156
> > > >
> > > > Do you have a core file for admin server?
> > >
> > > No. It terminates without crashing.
> > > > If not, can you run the admin server using a debugger?
> > >
> > > Just tried it with gdb. But gdb prints an internal error (and crashes):
> > >
> > > elfread.c:366: internal-error: sect_index_data not initialized
> > > A problem internal to GDB has been detected,
> > > further debugging may prove unreliable.
> > > Quit this debugging session? (y or n) n
> > > elfread.c:366: internal-error: sect_index_data not initialized
> > > A problem internal to GDB has been detected,
> > > further debugging may prove unreliable.
> > >
> > > I looked at the nss source code, where the error occurs. Somehow the
> > > function NSS_RegisterShutdown is called before NSS is initialized and
> > > returns an error. I think this happens indirectly in mod_nss!?
> >
> > Which compiler did you use?  gcc or the free Sun compiler?  If the 
> > latter, I don't think gdb will work - you'll have to use the Sun 
> > debugger (dbx?)
>
> dbx works. I used gcc with Sun assembler.
> > Both mod_nss and mod_admserv perform NSS initialization.  mod_nss should 
> > be loaded first, then mod_admserv.
>
> dbx displays the loaded modules. mod_nss is loaded before mod_admserv.
>
> After some debugging and studying the sources, I found out that ssl is
> apparently disabled in my config. Used the default one. Just called
> start-ds-admin.
> Because of ssl being disabled nss gets not initialized. Found this one
> in the changelog of mod_nss:
>
> 2006-10-17  Rob Crittenden
> * mod_nss 1.0.5
> * Fix for a minor problem introduced with 1.0.4. NSS_Shutdown() was
>
> being
>       called during module unload even if SSL wasn't enabled causing an
> error
>       to display in the log.
>
> In mod_admserv the function SSL_ClearSessionCache() is called without
> checking if ssl is enabled.
>
> I setup and enabled ssl. Now it works.
> Wow. That misconfiguration was hard to find.

Please file a bug against 389 to fix the SSL_ClearSessionCache() 
problem.  Thanks!
> Thanks for ur help.
> > > > > Any advice?
> > > > >
> > > > > Regards,
> > > > > Steffen
> >
> > --
> > 389 users mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/389-users