<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body text="#000000" bgcolor="#FFFFFF">
The SELinux is in passive mode so I can get the AVC denied messeges,
but named-pkcs11 still crashes sometimes when systemctl reload
named-pkcs11 is triggered manually or by logrotate with the detailed
back trace listed in the initial email.<br>
<br>
<br>
<div class="moz-cite-prefix">On 13/10/17 10:42, Alberto Colosi
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CY4PR13MB13815CF8B9158F6F4CA6D23DA2480@CY4PR13MB1381.namprd13.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
<div id="divtagdefaultwrapper"
style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;"
dir="ltr">
<p>SELinux in passive ? , you can put
SETEnforce OFF in conf</p>
<p><br>
</p>
<p><br>
</p>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt"
face="Calibri, sans-serif" color="#000000"><b>From:</b>
bind-users <a class="moz-txt-link-rfc2396E" href="mailto:bind-users-bounces@lists.isc.org"><bind-users-bounces@lists.isc.org></a> on
behalf of Radu Pantiru
<a class="moz-txt-link-rfc2396E" href="mailto:radu.pantiru@devinfotech.co.uk"><radu.pantiru@devinfotech.co.uk></a><br>
<b>Sent:</b> Friday, October 13, 2017 10:49 AM<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
<b>Subject:</b> Re: bind-pkcs11-9.9.4-51.el7.x86_64 using
bind-dyndb-ldap in CentOS it triggering an assertion
failure</font>
<div> </div>
</div>
<div>I also want to add that SELinux is in permissive mode.<br>
<br>
<div class="moz-cite-prefix">On 10/10/17 14:14, Radu Pantiru
wrote:<br>
</div>
<blockquote type="cite">
<meta name="Title" content="">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15
(filtered medium)">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">I
did request help with CentOS but my feeling is that
you may be able to give me some information what
happens at the code level.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">It
is not happening every time when reloading the
named-pkcs11 service.<br>
<br>
The backtrace:<br>
<br>
(gdb) thread apply all bt<br>
<br>
Thread 8 (Thread 0x7f4083cbc700 (LWP 21357)):<br>
#0 <a class="moz-txt-link-abbreviated"
href="mailto:pthread_cond_wait@@GLIBC_2.3.2"
moz-do-not-send="true">
pthread_cond_wait@@GLIBC_2.3.2</a> () at
../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185<br>
#1 0x00007f40890bd4be in dispatch
(manager=0x7f4089aa9010) at task.c:1065<br>
#2 run (uap=0x7f4089aa9010) at task.c:1286<br>
#3 0x00007f4087227e25 in start_thread
(arg=0x7f4083cbc700) at pthread_create.c:308<br>
#4 0x00007f408629f34d in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:113<br>
<br>
Thread 7 (Thread 0x7f40844bd700 (LWP 21356)):<br>
#0 <a class="moz-txt-link-abbreviated"
href="mailto:pthread_cond_wait@@GLIBC_2.3.2"
moz-do-not-send="true">
pthread_cond_wait@@GLIBC_2.3.2</a> () at
../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185<br>
#1 0x00007f40890bd4be in dispatch
(manager=0x7f4089aa9010) at task.c:1065<br>
#2 run (uap=0x7f4089aa9010) at task.c:1286<br>
#3 0x00007f4087227e25 in start_thread
(arg=0x7f40844bd700) at pthread_create.c:308<br>
#4 0x00007f408629f34d in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:113<br>
<br>
Thread 6 (Thread 0x7f40824b9700 (LWP 21360)):<br>
#0 <a class="moz-txt-link-abbreviated"
href="mailto:pthread_cond_timedwait@@GLIBC_2.3.2"
moz-do-not-send="true">
pthread_cond_timedwait@@GLIBC_2.3.2</a> () at
../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:238<br>
#1 0x00007f40890d6e48 in isc_condition_waituntil (<a
href="mailto:c=c@entry" moz-do-not-send="true">c=c@entry</a>=0x7f4089aaa078,
<a href="mailto:m=m@entry" moz-do-not-send="true">m=m@entry</a>=0x7f4089aaa028,
<a href="mailto:t=t@entry" moz-do-not-send="true">
t=t@entry</a>=0x7f4089aaa06c) at condition.c:66<br>
#2 0x00007f40890c1ef3 in run (uap=0x7f4089aaa010) at
timer.c:825<br>
#3 0x00007f4087227e25 in start_thread
(arg=0x7f40824b9700) at pthread_create.c:308<br>
#4 0x00007f408629f34d in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:113<br>
<br>
Thread 5 (Thread 0x7f40786d7700 (LWP 21875)):<br>
#0 0x00007f4086294a3d in poll () at
../sysdeps/unix/syscall-template.S:81<br>
#1 0x00007f407bbcebdb in poll
(__timeout=<optimized out>,
__nfds=<optimized out>, __fds=<optimized
out>) at /usr/include/bits/poll2.h:46<br>
#2 ldap_int_select (ld=<optimized out>,
timeout=<optimized out>) at os-ip.c:1138<br>
#3 0x00007f407bbb90bd in wait4msg
(result=0x7f40786d6558, timeout=<optimized
out>, all=2, msgid=4, ld=0x7f4070002b40) at
result.c:312<br>
#4 ldap_result (ld=0x7f4070002b40, msgid=4, <a
href="mailto:all=all@entry" moz-do-not-send="true">all=all@entry</a>=2,
timeout=<optimized out>,
<a href="mailto:result=result@entry"
moz-do-not-send="true">result=result@entry</a>=0x7f40786d65b8)
at result.c:117<br>
#5 0x00007f407bbe555c in ldap_sync_poll (<a
href="mailto:ls=ls@entry" moz-do-not-send="true">ls=ls@entry</a>=0x7f407000d720)
at ldap_sync.c:879<br>
#6 0x00007f4080124362 in ldap_sync_doit (<a
href="mailto:inst=inst@entry"
moz-do-not-send="true">inst=inst@entry</a>=0x7f4089aacf40,
conn=<optimized out>,
<a href="mailto:filter_objcs=filter_objcs@entry"
moz-do-not-send="true">filter_objcs=filter_objcs@entry</a>=0x7f408013a550
"(|(objectClass=idnsZone)
(objectClass=idnsForwardZone)
(objectClass=idnsRecord))",<br>
<a href="mailto:mode=mode@entry"
moz-do-not-send="true">mode=mode@entry</a>=3) at
ldap_helper.c:4651<br>
#7 0x00007f408012485f in ldap_syncrepl_watcher
(arg=0x7f4089aacf40) at ldap_helper.c:4727<br>
#8 0x00007f4087227e25 in start_thread
(arg=0x7f40786d7700) at pthread_create.c:308<br>
#9 0x00007f408629f34d in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:113<br>
<br>
Thread 4 (Thread 0x7f4081cb8700 (LWP 21361)):<br>
#0 0x00007f408629f923 in epoll_wait () at
../sysdeps/unix/syscall-template.S:81<br>
#1 0x00007f40890ce916 in watcher
(uap=0x7f4089aac010) at socket.c:3913<br>
#2 0x00007f4087227e25 in start_thread
(arg=0x7f4081cb8700) at pthread_create.c:308<br>
#3 0x00007f408629f34d in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:113<br>
<br>
Thread 3 (Thread 0x7f40834bb700 (LWP 21358)):<br>
#0 <a class="moz-txt-link-abbreviated"
href="mailto:pthread_cond_wait@@GLIBC_2.3.2"
moz-do-not-send="true">
pthread_cond_wait@@GLIBC_2.3.2</a> () at
../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185<br>
#1 0x00007f40890bd4be in dispatch
(manager=0x7f4089aa9010) at task.c:1065<br>
#2 run (uap=0x7f4089aa9010) at task.c:1286<br>
#3 0x00007f4087227e25 in start_thread
(arg=0x7f40834bb700) at pthread_create.c:308<br>
#4 0x00007f408629f34d in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:113<br>
<br>
Thread 2 (Thread 0x7f4089ae5840 (LWP 21355)):<br>
#0 0x00007f40861dc572 in do_sigsuspend
(set=0x7ffe7ce76400) at
../sysdeps/unix/sysv/linux/sigsuspend.c:32<br>
---Type <return> to continue, or q
<return> to quit---<br>
#1 __GI___sigsuspend (<a href="mailto:set=set@entry"
moz-do-not-send="true">set=set@entry</a>=0x7ffe7ce76400)
at ../sysdeps/unix/sysv/linux/sigsuspend.c:46<br>
#2 0x00007f40890c475c in isc__app_ctxrun (<a
href="mailto:ctx0=ctx0@entry"
moz-do-not-send="true">ctx0=ctx0@entry</a>=0x7f40892efd20
<isc_g_appctx>) at app.c:695<br>
#3 0x00007f40890c4b4c in isc__app_run () at
app.c:722<br>
#4 0x0000563558d91595 in main (argc=<optimized
out>, argv=<optimized out>) at
./main.c:1118<br>
<br>
Thread 1 (Thread 0x7f4082cba700 (LWP 21359)):<br>
#0 0x00007f40861dc1f7 in __GI_raise (<a
href="mailto:sig=sig@entry" moz-do-not-send="true">sig=sig@entry</a>=6)
at ../nptl/sysdeps/unix/sysv/linux/raise.c:56<br>
#1 0x00007f40861dd8e8 in __GI_abort () at abort.c:90<br>
#2 0x0000563558da1e7e in assertion_failed
(file=<optimized out>, line=<optimized
out>, type=<optimized out>,
cond=<optimized out>) at ./main.c:222<br>
#3 0x00007f408909d29a in isc_assertion_failed (<a
href="mailto:file=file@entry"
moz-do-not-send="true">file=file@entry</a>=0x7f408948a2d4
"rdataset.c",
<a href="mailto:line=line@entry"
moz-do-not-send="true">line=line@entry</a>=266, <a
href="mailto:type=type@entry"
moz-do-not-send="true">
type=type@entry</a>=isc_assertiontype_require, <a
href="mailto:cond=cond@entry"
moz-do-not-send="true">cond=cond@entry</a>=0x7f408948a3a8
"rdataset->methods != ((void *)0)")<br>
at assertions.c:57<br>
#4 0x00007f40893df828 in dns_rdataset_first
(rdataset=<optimized out>) at rdataset.c:266<br>
#5 0x00007f40893f155c in fctx_getaddresses (<a
href="mailto:fctx=fctx@entry"
moz-do-not-send="true">fctx=fctx@entry</a>=0x7f4068192670,
<a href="mailto:badcache=badcache@entry"
moz-do-not-send="true">badcache=badcache@entry</a>=isc_boolean_false)
at resolver.c:2727<br>
#6 0x00007f40893f20fd in fctx_try (<a
href="mailto:fctx=fctx@entry"
moz-do-not-send="true">fctx=fctx@entry</a>=0x7f4068192670,
<a href="mailto:retrying=retrying@entry"
moz-do-not-send="true">retrying=retrying@entry</a>=isc_boolean_false,
<a href="mailto:badcache=badcache@entry"
moz-do-not-send="true">badcache=badcache@entry</a>=isc_boolean_false)
at resolver.c:3062<br>
#7 0x00007f40893f290c in fctx_start
(task=<optimized out>, event=<optimized
out>) at resolver.c:3444<br>
#8 0x00007f40890bd6a6 in dispatch
(manager=0x7f4089aa9010) at task.c:1116<br>
#9 run (uap=0x7f4089aa9010) at task.c:1286<br>
#10 0x00007f4087227e25 in start_thread
(arg=0x7f4082cba700) at pthread_create.c:308<br>
#11 0x00007f408629f34d in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:113</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">(gdb)
frame 5</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">#5
0x00007f7adb9c255c in fctx_getaddresses
(fctx=fctx@entry=0x7f7ac103e6e0,
badcache=badcache@entry=isc_boolean_false) at
resolver.c:2727</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2727
for (result =
dns_rdataset_first(&fctx->nameservers);</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">(gdb)
list +</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2722
isc_stdtime_get(&now);</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2723</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2724
INSIST(ISC_LIST_EMPTY(fctx->finds));</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2725
INSIST(ISC_LIST_EMPTY(fctx->altfinds));</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2726</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2727
for (result =
dns_rdataset_first(&fctx->nameservers);</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2728
result == ISC_R_SUCCESS;</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2729
result =
dns_rdataset_next(&fctx->nameservers))</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2730
{</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">2731
dns_rdataset_current(&fctx->nameservers,
&rdata);</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">(gdb)
frame 4</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">#4
0x00007f7adb9b0828 in dns_rdataset_first
(rdataset=<optimized out>) at rdataset.c:266</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">266
REQUIRE(rdataset->methods != NULL);</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">thank
you for your help!</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
</div>
</blockquote>
<br>
</div>
</div>
</div>
</blockquote>
<br>
</body>
</html>