[Date Prev][Date Next] [Chronological] [Thread] [Top]

SASL causes segmentation fault (ITS#3172)



Full_Name: Quanah Gibson-Mount
Version: 2.2.11
OS: Solaris 8
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (171.66.182.82)


When playing around with ACL based issues, I had slapd segfault on me:

# /usr/local/lib/slapd -d -1 -h "ldap:/// ldaps:///" 1>/var/log/slapd.out 2>&1
Segmentation Fault

Fortunately, I had -d -1 debugging on.  The log file shows:

access_allowed: no res from state (entryCSN)
=> acl_mask: access to entry "uid=akaiser,cn=Accounts,dc=Stanford,dc=edu", attr
"entryCSN" requested
=> acl_mask: to value by
"cn=ldap-dev3,cn=ldap,cn=operational,dc=stanford,dc=edu", (=n)
<= check a_dn_pat: cn=replicator,cn=service,cn=applications,dc=stanford,dc=edu
<= check a_dn_pat: cn=registrydataauditor,cn=service,cn=applications,dc=stanford,dc=edu
<= check a_authz.sai_sasl_ssf: ACL 56 > OP 56
<= acl_mask: [5] applying read(=rscx) (stop)
<= acl_mask: [5] mask: read(=rscx)
=> access_allowed: read access granted by read(=rscx)
sl_malloc of 32 bytes failed, using ch_malloc
sl_malloc of 32 bytes failed, using ch_malloc
sl_malloc of 32 bytes failed, using ch_malloc
sl_malloc of 32 bytes failed, using ch_malloc
ber_flush: 869 bytes to sd 10
  0000:  30 82 03 61 02 01 04 64  82 03 20 04 2a 75 69 64   0..a...d.. .*uid
  0010:  3d 61 6b 61 69 73 65 72  2c 63 6e 3d 41 63 63 6f   =akaiser,cn=Acco
  0020:  75 6e 74 73 2c 64 63 3d  53 74 61 6e 66 6f 72 64   unts,dc=Stanford
  0030:  2c 64 63 3d 65 64 75 30  82 02 f0 30 2b 04 11 6b   ,dc=edu0...0+..k
  0040:  72 62 35 50 72 69 6e 63  69 70 61 6c 4e 61 6d 65   rb5PrincipalName
  0050:  31 16 04 14 61 6b 61 69  73 65 72 40 73 74 61 6e   1...akaiser@stan
  0060:  66 6f 72 64 2e 65 64 75  30 3c 04 0b 6f 62 6a 65   ford.edu0<..obje
  0070:  63 74 43 6c 61 73 73 31  2d 04 09 73 75 41 63 63   ctClass1-..suAcc
  0080:  6f 75 6e 74 04 11 73 75  4b 65 72 62 65 72 6f 73   ount..suKerberos
  0090:  53 65 72 76 69 63 65 04  0d 73 75 4f 70 65 72 61   Service..suOpera
  00a0:  74 69 6f 6e 61 6c 30 50  04 05 6f 77 6e 65 72 31   tional0P..owner1
  00b0:  47 04 45 73 75 52 65 67  49 44 3d 63 32 33 35 39   G.EsuRegID=c2359
  00c0:  66 61 32 65 37 35 62 31  31 64 31 62 62 33 32 32   fa2e75b11d1bb322
  00d0:  34 33 36 30 30 30 62 61  61 37 37 2c 63 6e 3d 50   436000baa77,cn=P
  00e0:  65 6f 70 6c 65 2c 64 63  3d 53 74 61 6e 66 6f 72   eople,dc=Stanfor
  00f0:  64 2c 64 63 3d 65 64 75  30 52 04 07 73 65 65 41   d,dc=edu0R..seeA
  0100:  6c 73 6f 31 47 04 45 73  75 52 65 67 49 44 3d 63   lso1G.EsuRegID=c
  0110:  32 33 35 39 66 61 32 65  37 35 62 31 31 64 31 62   2359fa2e75b11d1b
  0120:  62 33 32 32 34 33 36 30  30 30 62 61 61 37 37 2c   b322436000baa77,
  0130:  63 6e 3d 50 65 6f 70 6c  65 2c 64 63 3d 53 74 61   cn=People,dc=Sta
  0140:  6e 66 6f 72 64 2c 64 63  3d 65 64 75 30 17 04 0a   nford,dc=edu0...
  0150:  73 75 4b 72 62 34 6e 61  6d 65 31 09 04 07 61 6b   suKrb4name1...ak
  0160:  61 69 73 65 72 30 1b 04  0f 73 75 41 63 63 6f 75   aiser0...suAccou
  0170:  6e 74 53 74 61 74 75 73  31 08 04 06 61 63 74 69   ntStatus1...acti
  0180:  76 65 30 1e 04 0d 73 75  43 72 65 61 74 65 41 67   ve0...suCreateAg
  0190:  65 6e 74 31 0d 04 0b 41  63 63 6f 75 6e 74 53 6c   ent1...AccountSl
  01a0:  6f 67 30 15 04 0b 73 75  43 72 65 61 74 65 41 50   og0...suCreateAP
  01b0:  49 31 06 04 04 4c 44 49  46 30 16 04 0d 73 75 44   I1...LDIF0...suD
  01c0:  65 73 63 72 69 70 74 69  6f 6e 31 05 04 03 4e 2f   escription1...N/
  01d0:  41 30 19 04 0d 73 75 45  6e 74 72 79 53 74 61 74   A0...suEntryStat
  01e0:  75 73 31 08 04 06 61 63  74 69 76 65 30 57 04 0c   us1...active0W..
  01f0:  73 75 49 64 65 6e 74 69  66 69 65 73 31 47 04 45   suIdentifies1G.E
  0200:  73 75 52 65 67 49 44 3d  63 32 33 35 39 66 61 32   suRegID=c2359fa2
  0210:  65 37 35 62 31 31 64 31  62 62 33 32 32 34 33 36   e75b11d1bb322436
  0220:  30 30 30 62 61 61 37 37  2c 63 6e 3d 50 65 6f 70   000baa77,cn=Peop
  0230:  6c 65 2c 64 63 3d 53 74  61 6e 66 6f 72 64 2c 64   le,dc=Stanford,d
  0240:  63 3d 65 64 75 30 1c 04  10 73 75 4b 65 72 62 65   c=edu0...suKerbe
  0250:  72 6f 73 53 74 61 74 75  73 31 08 04 06 61 63 74   rosStatus1...act
  0260:  69 76 65 30 20 04 06 73  75 4e 61 6d 65 31 16 04   ive0 ..suName1..
  0270:  14 41 6c 61 6e 20 42 65  6e 6a 61 6d 69 6e 20 4b   .Alan Benjamin K
  0280:  61 69 73 65 72 30 23 04  08 73 75 4e 61 6d 65 4c   aiser0#..suNameL
  0290:  46 31 17 04 15 4b 61 69  73 65 72 2c 20 41 6c 61   F1...Kaiser, Ala
  02a0:  6e 20 42 65 6e 6a 61 6d  69 6e 30 17 04 09 73 75   n Benjamin0...su
  02b0:  53 65 72 76 69 63 65 31  0a 04 08 6b 65 72 62 65   Service1...kerbe
  02c0:  72 6f 73 30 10 04 03 75  69 64 31 09 04 07 61 6b   ros0...uid1...ak
  02d0:  61 69 73 65 72 30 24 04  15 73 74 72 75 63 74 75   aiser0$..structu
  02e0:  72 61 6c 4f 62 6a 65 63  74 43 6c 61 73 73 31 0b   ralObjectClass1.
  02f0:  04 09 73 75 41 63 63 6f  75 6e 74 30 2e 04 08 65   ..suAccount0...e
  0300:  6e 74 72 79 43 53 4e 31  22 04 20 32 30 30 34 30   ntryCSN1". 20040
  0310:  34 31 36 32 31 31 35 33  31 5a 23 30 30 30 30 36   416211531Z#00006
  0320:  39 23 30 30 23 30 30 30  30 30 30 a0 38 30 36 04   9#00#000000.806.
  0330:  18 31 2e 33 2e 36 2e 31  2e 34 2e 31 2e 34 32 30   .1.3.6.1.4.1.420
  0340:  33 2e 31 2e 39 2e 31 2e  32 01 01 ff 04 17 30 15   3.1.9.1.2.....0.
  0350:  0a 01 01 04 10 ef dd e7  cc 24 36 10 28 86 9b dc   .........$6.(...
  0360:  98 15 d9 e7 75                                     ....u
sb_sasl_write: failed to encode packet: can't request info until later in
exchange