Steffen Blume wrote: > Rich Megginson wrote: > >> Steffen Blume wrote: >> >> >>> Rich Megginson wrote: >>> >>> >>> >>>> Steffen Blume wrote: >>>> >>>> >>>> >>>>> Hello, >>>>> >>>>> my admin server (apache/httpd.worker) is not starting under >>>>> /OpenSolaris/ (/SunOS 5.11/). >>>>> I added the error log below. Log level is debug. The only error msg is >>>>> the last line from nss. I compiled 389 DS by myself. >>>>> Versions: >>>>> nss-3.12.4-with-nspr-4.8 >>>>> 389-ds-base-1.2.4 >>>>> mod_nss-1.0.8 >>>>> adminutil-1.1.8 >>>>> 389-admin-1.1.9 >>>>> >>>>> -------------------------- >>>>> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2419): Entering >>>>> mod_admserv_post_config - pid is [6597] init count is [0] >>>>> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2248): Entering >>>>> do_admserv_post_config - pid is [6597] >>>>> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2256): Entering >>>>> do_admserv_post_config - init count is [1] >>>>> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2280): [6597] Cache >>>>> expiration set to 600 seconds >>>>> [Wed Jan 06 11:13:55 2010] [debug] mod_admserv.c(2383): Added >>>>> StartConfigDs task entry >>>>> [cn=startconfigds,cn=operation,cn=tasks,cn=admin-serv-ldap,cn=389 >>>>> administration server,cn=server >>>>> group,cn=ldap.mydomain.de,ou=mydomain.de,o=netscaperoot:start_config_ds:] >>>>> >>>>> for user [LocalSuper] >>>>> [Wed Jan 06 11:13:55 2010] [notice] Access Host filter is: >>>>> *.mst.uni-hannover.de >>>>> [Wed Jan 06 11:13:55 2010] [notice] Access Address filter is: * >>>>> [Wed Jan 06 11:13:55 2010] [info] mod_unique_id: using ip addr >>>>> xxx.xxx.xxx.xxx >>>>> Assertion failure: SECSuccess == rv, at sslnonce.c:156 >>>>> >>>>> >>>>> >>>>> >>>> Do you have a core file for admin server? >>>> >>>> >>>> >>> No. It terminates without crashing. >>> >>> >>> >>>> If not, can you run the admin server using a debugger? >>>> >>>> >>>> >>> Just tried it with gdb. But gdb prints an internal error (and crashes): >>> >>> elfread.c:366: internal-error: sect_index_data not initialized >>> A problem internal to GDB has been detected, >>> further debugging may prove unreliable. >>> Quit this debugging session? (y or n) n >>> elfread.c:366: internal-error: sect_index_data not initialized >>> A problem internal to GDB has been detected, >>> further debugging may prove unreliable. >>> >>> I looked at the nss source code, where the error occurs. Somehow the >>> function NSS_RegisterShutdown is called before NSS is initialized and >>> returns an error. I think this happens indirectly in mod_nss!? >>> >>> >>> >> Which compiler did you use? gcc or the free Sun compiler? If the >> latter, I don't think gdb will work - you'll have to use the Sun >> debugger (dbx?) >> >> > dbx works. I used gcc with Sun assembler. > >> Both mod_nss and mod_admserv perform NSS initialization. mod_nss should >> be loaded first, then mod_admserv. >> >> > dbx displays the loaded modules. mod_nss is loaded before mod_admserv. > > After some debugging and studying the sources, I found out that ssl is > apparently disabled in my config. Used the default one. Just called > start-ds-admin. > Because of ssl being disabled nss gets not initialized. Found this one > in the changelog of mod_nss: > -------------------------------- > 2006-10-17 Rob Crittenden <rcritten at redhat.com> > > * mod_nss 1.0.5 > * Fix for a minor problem introduced with 1.0.4. NSS_Shutdown() was > being > called during module unload even if SSL wasn't enabled causing an > error > to display in the log. > -------------------------------- > In mod_admserv the function SSL_ClearSessionCache() is called without > checking if ssl is enabled. > > I setup and enabled ssl. Now it works. > Wow. That misconfiguration was hard to find. > Please file a bug against 389 to fix the SSL_ClearSessionCache() problem. Thanks! > Thanks for ur help. > > >>> >>> >>> >>>>> -------------------------- >>>>> >>>>> Any advice? >>>>> >>>>> Regards, >>>>> Steffen >>>>> >>>>> >>>>> >>>>> >>>>> >>> >>> >>> >> -- >> 389 users mailing list >> 389-users at lists.fedoraproject.org >> https://admin.fedoraproject.org/mailman/listinfo/389-users >> >> > > >
