Re: [389-users] admin server under solaris not running

[Rich Megginson]

Steffen Blume wrote:
>  Rich Megginson wrote:
>    
> > Steffen Blume wrote:
> >     
> >> Hello,
> >>
> >> my admin server (apache/httpd.worker) is not starting under
> >> /OpenSolaris/ (/SunOS 5.11/).
> >> I added the error log below. Log level is debug. The only error msg is
> >> the last line from nss. I compiled 389 DS by myself.
> >> Versions:
> >> nss-3.12.4-with-nspr-4.8
> >> 389-ds-base-1.2.4
> >> mod_nss-1.0.8
> >> adminutil-1.1.8
> >> 389-admin-1.1.9
> >>
> >> --------------------------
> >> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2419): Entering
> >> mod_admserv_post_config - pid is [6597] init count is [0]
> >> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2248): Entering
> >> do_admserv_post_config - pid is [6597]
> >> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2256): Entering
> >> do_admserv_post_config - init count is [1]
> >> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2280): [6597] Cache
> >> expiration set to 600 seconds
> >> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2383): Added
> >> StartConfigDs task entry
> >> [cn=startconfigds,cn=operation,cn=tasks,cn=admin-serv-ldap,cn=389
> >> administration server,cn=server
> >> group,cn=ldap.mydomain.de,ou=mydomain.de,o=netscaperoot:start_config_ds:]
> >>
> >> for user [LocalSuper]
> >> [Wed Jan 06 11:13:55 2010] [notice] Access Host filter is:
> >> *.mst.uni-hannover.de
> >> [Wed Jan 06 11:13:55 2010] [notice] Access Address filter is: *
> >> [Wed Jan 06 11:13:55 2010] [info] mod_unique_id: using ip addr
> >> xxx.xxx.xxx.xxx
> >> Assertion failure: SECSuccess == rv, at sslnonce.c:156
> >>   
> >>       
> > Do you have a core file for admin server?
> >     
>  No. It terminates without crashing.
>    
> > If not, can you run the admin server using a debugger?
> >     
>  Just tried it with gdb. But gdb prints an internal error (and crashes):
>
>  elfread.c:366: internal-error: sect_index_data not initialized
>  A problem internal to GDB has been detected,
>  further debugging may prove unreliable.
>  Quit this debugging session? (y or n) n
>  elfread.c:366: internal-error: sect_index_data not initialized
>  A problem internal to GDB has been detected,
>  further debugging may prove unreliable.
>
>  I looked at the nss source code, where the error occurs. Somehow the
>  function NSS_RegisterShutdown is called before NSS is initialized and
>  returns an error. I think this happens indirectly in mod_nss!?
>     
Which compiler did you use?  gcc or the free Sun compiler?  If the 
latter, I don't think gdb will work - you'll have to use the Sun 
debugger (dbx?)

Both mod_nss and mod_admserv perform NSS initialization.  mod_nss should 
be loaded first, then mod_admserv.
>    
> >> --------------------------
> >>
> >> Any advice?
> >>
> >> Regards,
> >> Steffen
> >>
> >>   
> >>       
>
>

(Solved)Re: admin server under solaris not running

[Steffen Blume]

Rich Megginson wrote:
>  Steffen Blume wrote:
>    
> > Rich Megginson wrote:
> >   
> >     
> >> Steffen Blume wrote:
> >>     
> >>       
> >>> Hello,
> >>>
> >>> my admin server (apache/httpd.worker) is not starting under
> >>> /OpenSolaris/ (/SunOS 5.11/).
> >>> I added the error log below. Log level is debug. The only error msg is
> >>> the last line from nss. I compiled 389 DS by myself.
> >>> Versions:
> >>> nss-3.12.4-with-nspr-4.8
> >>> 389-ds-base-1.2.4
> >>> mod_nss-1.0.8
> >>> adminutil-1.1.8
> >>> 389-admin-1.1.9
> >>>
> >>> --------------------------
> >>> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2419): Entering
> >>> mod_admserv_post_config - pid is [6597] init count is [0]
> >>> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2248): Entering
> >>> do_admserv_post_config - pid is [6597]
> >>> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2256): Entering
> >>> do_admserv_post_config - init count is [1]
> >>> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2280): [6597] Cache
> >>> expiration set to 600 seconds
> >>> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2383): Added
> >>> StartConfigDs task entry
> >>> [cn=startconfigds,cn=operation,cn=tasks,cn=admin-serv-ldap,cn=389
> >>> administration server,cn=server
> >>> group,cn=ldap.mydomain.de,ou=mydomain.de,o=netscaperoot:start_config_ds:]
> >>>
> >>> for user [LocalSuper]
> >>> [Wed Jan 06 11:13:55 2010] [notice] Access Host filter is:
> >>> *.mst.uni-hannover.de
> >>> [Wed Jan 06 11:13:55 2010] [notice] Access Address filter is: *
> >>> [Wed Jan 06 11:13:55 2010] [info] mod_unique_id: using ip addr
> >>> xxx.xxx.xxx.xxx
> >>> Assertion failure: SECSuccess == rv, at sslnonce.c:156
> >>>   
> >>>       
> >>>         
> >> Do you have a core file for admin server?
> >>     
> >>       
> > No. It terminates without crashing.
> >   
> >     
> >> If not, can you run the admin server using a debugger?
> >>     
> >>       
> > Just tried it with gdb. But gdb prints an internal error (and crashes):
> >
> > elfread.c:366: internal-error: sect_index_data not initialized
> > A problem internal to GDB has been detected,
> > further debugging may prove unreliable.
> > Quit this debugging session? (y or n) n
> > elfread.c:366: internal-error: sect_index_data not initialized
> > A problem internal to GDB has been detected,
> > further debugging may prove unreliable.
> >
> > I looked at the nss source code, where the error occurs. Somehow the
> > function NSS_RegisterShutdown is called before NSS is initialized and
> > returns an error. I think this happens indirectly in mod_nss!?
> >   
> >     
>  Which compiler did you use?  gcc or the free Sun compiler?  If the 
>  latter, I don't think gdb will work - you'll have to use the Sun 
>  debugger (dbx?)
>     
dbx works. I used gcc with Sun assembler.
>  Both mod_nss and mod_admserv perform NSS initialization.  mod_nss
> should 
>  be loaded first, then mod_admserv.
>     
dbx displays the loaded modules. mod_nss is loaded before mod_admserv.

After some debugging and studying the sources, I found out that ssl is
apparently disabled in my config. Used the default one. Just called
start-ds-admin.
Because of ssl being disabled nss gets not initialized. Found this one
in the changelog of mod_nss:
--------------------------------
2006-10-17  Rob Crittenden <rcritten(a)redhat.com&gt;

    * mod_nss 1.0.5
    * Fix for a minor problem introduced with 1.0.4. NSS_Shutdown() was
being
      called during module unload even if SSL wasn't enabled causing an
error
      to display in the log.
--------------------------------
In mod_admserv the function SSL_ClearSessionCache() is called without
checking if ssl is enabled.

I setup and enabled ssl. Now it works.
Wow. That misconfiguration was hard to find.

Thanks for ur help.

> >   
> >     
> >>> --------------------------
> >>>
> >>> Any advice?
> >>>
> >>> Regards,
> >>> Steffen
> >>>
> >>>   
> >>>       
> >>>         
> >   
> >     
>
>  --
>  389 users mailing list
>  389-users(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/389-users
>     

-- 
Dipl.-Ing. Steffen Blume        Institute of Microelectronic Systems
phone : [phone]       Leibniz Universität Hannover
fax   : [phone]       Appelstr. 4, 30167 Hannover, Germany
mail  : sblume(a)ims.uni-hannover.de

(Solved)Re: admin server under solaris not running

[Rich Megginson]

Steffen Blume wrote:
>  Rich Megginson wrote:
>    
> > Steffen Blume wrote:
> >   
> >     
> >> Rich Megginson wrote:
> >>   
> >>     
> >>       
> >>> Steffen Blume wrote:
> >>>     
> >>>       
> >>>         
> >>>> Hello,
> >>>>
> >>>> my admin server (apache/httpd.worker) is not starting under
> >>>> /OpenSolaris/ (/SunOS 5.11/).
> >>>> I added the error log below. Log level is debug. The only error msg is
> >>>> the last line from nss. I compiled 389 DS by myself.
> >>>> Versions:
> >>>> nss-3.12.4-with-nspr-4.8
> >>>> 389-ds-base-1.2.4
> >>>> mod_nss-1.0.8
> >>>> adminutil-1.1.8
> >>>> 389-admin-1.1.9
> >>>>
> >>>> --------------------------
> >>>> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2419): Entering
> >>>> mod_admserv_post_config - pid is [6597] init count is [0]
> >>>> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2248): Entering
> >>>> do_admserv_post_config - pid is [6597]
> >>>> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2256): Entering
> >>>> do_admserv_post_config - init count is [1]
> >>>> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2280): [6597] Cache
> >>>> expiration set to 600 seconds
> >>>> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2383): Added
> >>>> StartConfigDs task entry
> >>>> [cn=startconfigds,cn=operation,cn=tasks,cn=admin-serv-ldap,cn=389
> >>>> administration server,cn=server
> >>>>
> group,cn=ldap.mydomain.de,ou=mydomain.de,o=netscaperoot:start_config_ds:]
> >>>>
> >>>> for user [LocalSuper]
> >>>> [Wed Jan 06 11:13:55 2010] [notice] Access Host filter is:
> >>>> *.mst.uni-hannover.de
> >>>> [Wed Jan 06 11:13:55 2010] [notice] Access Address filter is: *
> >>>> [Wed Jan 06 11:13:55 2010] [info] mod_unique_id: using ip addr
> >>>> xxx.xxx.xxx.xxx
> >>>> Assertion failure: SECSuccess == rv, at sslnonce.c:156
> >>>>   
> >>>>       
> >>>>         
> >>>>           
> >>> Do you have a core file for admin server?
> >>>     
> >>>       
> >>>         
> >> No. It terminates without crashing.
> >>   
> >>     
> >>       
> >>> If not, can you run the admin server using a debugger?
> >>>     
> >>>       
> >>>         
> >> Just tried it with gdb. But gdb prints an internal error (and crashes):
> >>
> >> elfread.c:366: internal-error: sect_index_data not initialized
> >> A problem internal to GDB has been detected,
> >> further debugging may prove unreliable.
> >> Quit this debugging session? (y or n) n
> >> elfread.c:366: internal-error: sect_index_data not initialized
> >> A problem internal to GDB has been detected,
> >> further debugging may prove unreliable.
> >>
> >> I looked at the nss source code, where the error occurs. Somehow the
> >> function NSS_RegisterShutdown is called before NSS is initialized and
> >> returns an error. I think this happens indirectly in mod_nss!?
> >>   
> >>     
> >>       
> > Which compiler did you use?  gcc or the free Sun compiler?  If the 
> > latter, I don't think gdb will work - you'll have to use the Sun 
> > debugger (dbx?)
> >   
> >     
>  dbx works. I used gcc with Sun assembler.
>    
> > Both mod_nss and mod_admserv perform NSS initialization.  mod_nss should 
> > be loaded first, then mod_admserv.
> >   
> >     
>  dbx displays the loaded modules. mod_nss is loaded before mod_admserv.
>
>  After some debugging and studying the sources, I found out that ssl is
>  apparently disabled in my config. Used the default one. Just called
>  start-ds-admin.
>  Because of ssl being disabled nss gets not initialized. Found this one
>  in the changelog of mod_nss:
>  --------------------------------
>  2006-10-17  Rob Crittenden <rcritten(a)redhat.com&gt;
>
>      * mod_nss 1.0.5
>      * Fix for a minor problem introduced with 1.0.4. NSS_Shutdown() was
>  being
>        called during module unload even if SSL wasn't enabled causing an
>  error
>        to display in the log.
>  --------------------------------
>  In mod_admserv the function SSL_ClearSessionCache() is called without
>  checking if ssl is enabled.
>
>  I setup and enabled ssl. Now it works.
>  Wow. That misconfiguration was hard to find.
>     
Please file a bug against 389 to fix the SSL_ClearSessionCache() 
problem.  Thanks!
>  Thanks for ur help.
>
>    
> >>   
> >>     
> >>       
> >>>> --------------------------
> >>>>
> >>>> Any advice?
> >>>>
> >>>> Regards,
> >>>> Steffen
> >>>>
> >>>>   
> >>>>       
> >>>>         
> >>>>           
> >>   
> >>     
> >>       
> > --
> > 389 users mailing list
> > 389-users(a)lists.fedoraproject.org
> > https://admin.fedoraproject.org/mailman/listinfo/389-users
> >   
> >     
>
>
>