On 11/28/2016 10:22 AM, Giulio Casella wrote: > Il 28/11/2016 15:25, Lukas Slebodnik ha scritto: >> On (28/11/16 12:39), Giulio Casella wrote: >>> Hello, >>> >>> I have a setup with two ipa server in replica, based on CentOS 7. >>> On one server (since a couple of days) ipa cannot start, the failing >>> service >>> is dirsrv@<REALM-NAME>.service. >>> In journal I have: >>> >>> ns-slapd[4617]: segfault at 7fb53b1ce515 ip 00007fb50126e1a6sp >>> 00007ffc0b80d6c8 error 4 in libc-2.17.so[7fb501124000+1b7000] >>> >>> (just after a lot of SSL alerts complaining about some enabled >>> cypher suite, >>> but I cannot say if this could be related). >>> >>> I'm using ipa 4.2.0, and 389-ds-base 1.3.4. >>> >> It would be good to know the exact version. >> rpm -q 389-ds-base > > Installed version is: > > 389-ds-base-1.3.4.0-33.el7_2.x86_64 > >> >> Please provide backtrace or coredump; other developers will know >> wheter it's know bug or a new bug. > > Ok, you can find attached full stacktrace. It's crashing trying to read updates from the replication changelog.
Are you using attribute encryption? Any chance you have a way to reproduce this? Since this is happening on only one server then I think recreating the replication changelog will "fix" the issue. Just re-initializing that replica should do it. Does this server start - so it can be reinited? If not, you need to manually remove the changelog and start the directory server, and reinit it. Or perform a manual ldif initialization. (I can help with either one if needed) Regards, Mark > > Thanks in advance, > gc > > > >
-- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
