[389-users] Problem with ds setup

[Guillaume Chanaud]

Le 05/01/2012 18:58, Rich Megginson a écrit :
> On 01/05/2012 10:57 AM, Guillaume Chanaud wrote:
>> Hi,
>>
>> same here, there is a segfault in http.worker. It's the mod_nss fault 
>> (like always..).
> This has happened before?  Are there any bugs opened for this issue?  
> Is this SELinux related?

No it's not related to SElinux as it is totaly disabled on my system.
It happened after a dist-upgrade from Fedora 15 to 16, i don't know 
which version introduced the bug. I found some old bug reports about 
segfaults on httpd + mod_nss which should have been patched years ago. I 
also found some other segfaults bug reports on nss.
I (or Israel ) could fill a bug report but we have to investigate on 
which component/version is really faulty on that case (maybe it's a 
nss.conf or console.conf misconfiguration for http/mod_nss last 
versions, but i don't have the time to investigate right now, that's why 
i answered quickly about how to "dirty" resolve the problem for now). It 
would be great to see if it's the case on a fresh Fedora16 and 15 
install, as it would be easier to track the faulty module/version.

Guillaume

>> So here is the solution to get it working :
>>
>> In /etc/dirsrv/admin-serv/httpd.conf
>>
>> Comment lines :
>> LoadModule nss_module         /usr/lib64/httpd/modules/libmodnss.so
>> Include /etc/dirsrv/admin-serv/nss.conf
>>
>> In /etc/dirsrv/admin-serv/console.conf
>> Comment out everything after line
>> Listen 0.0.0.0:9830
>>
>> Aka : comment out everything related to NSS/certs
>>
>> Hope it'll help you.
>>
>> Guillaume
>> -- 
>> 389 users mailing list
>> 389-users at lists.fedoraproject.org
>> https://admin.fedoraproject.org/mailman/listinfo/389-users
>