ldap-utils: Assertion `lc->lconn_sasl_ctx == ((void *)0)' failed

[Debian Bug Importer]

Automatically imported from Debian bug report #278471 http://bugs.debian.org/278471

[Debian Bug Importer (debzilla)]

Automatically imported from Debian bug report #278471 http://bugs.debian.org/278471

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Wed, 27 Oct 2004 15:10:25 +1000
From: Pietro Abate <email address hidden>
To: Debian Bug Tracking System <email address hidden>
Subject: ldap-utils: Assertion `lc->lconn_sasl_ctx == ((void *)0)' failed

Package: ldap-utils
Version: 2.1.30-3
Severity: grave
Justification: renders package unusable

Hi,
I'm using ldap together with kerberos (that works ok). After installing
the following packages libnss-ldap libdb3-util libsasl7 I get

pulp:@NEW~# ldapsearch
ldapsearch:
/home/roland/debian/openldap/build/2.1.30/openldap2-2.1.30/libraries/libldap/cyrus.c:468:
ldap_int_sasl_open: Assertion `lc->lconn_sasl_ctx == ((void *)0)'
failed.

I get also the same problem with getent passwd ...
my nsswitch.conf looks like:
passwd: files ldap
group: files ldap
shadow: files ldap

hosts: files dns
networks: files

protocols: db files
services: db files
ethers: db files
rpc: db files

netgroup: ldap files

and /etc/ldap/ldap.conf (with meaningfull name)

BASE dc=example,dc=com
URI ldaps://ldap1.example.com ldaps://ldap2.example.com
sasl-realm EXAMPLE.COM

O didn't find any useful information about this bug in the BS or on the
web... I've reproduced this bug on two different machines, one running
testing and one unstable.

p

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.4.26-1-686-smp
Locale: LANG=en_AU, LC_CTYPE=en_AU (charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C)

Versions of packages ldap-utils depends on:
ii libc6 2.3.2.ds1-18 GNU C Library: Shared libraries an
ii libdb4.2 4.2.52-17 Berkeley v4.2 Database Libraries [
ii libgcrypt11 1.2.0-10 LGPL Crypto library - runtime libr
ii libgnutls11 1.0.16-9 GNU TLS library - runtime library
ii libgpg-error0 1.0-1 library for common error values an
ii libiodbc2 3.52.1-2 iODBC Driver Manager
ii libldap2 2.1.30-3 OpenLDAP libraries
ii libltdl3 1.5.6-2 A system independent dlopen wrappe
ii libsasl2 2.1.19-1.5 Authentication abstraction library
ii libslp1 1.0.11-7 OpenSLP libraries
ii zlib1g 1:1.2.2-1 compression library - runtime

-- no debconf information

--
++ "All great truths begin as blasphemies." -George Bernard Shaw
++ Please avoid sending me Word or PowerPoint attachments.
   See http://www.fsf.org/philosophy/no-word-attachments.html

[Torsten Landschoff (torsten)]

Hi Pietro,

On Wed, Oct 27, 2004 at 03:10:25PM +1000, Pietro Abate wrote:
> I'm using ldap together with kerberos (that works ok). After installing
> the following packages libnss-ldap libdb3-util libsasl7 I get
>
> pulp:@NEW~# ldapsearch
> ldapsearch:
> /home/roland/debian/openldap/build/2.1.30/openldap2-2.1.30/libraries/libldap/cyrus.c:468:
> ldap_int_sasl_open: Assertion `lc->lconn_sasl_ctx == ((void *)0)'
> failed.
...
> O didn't find any useful information about this bug in the BS or on the
> web... I've reproduced this bug on two different machines, one running
> testing and one unstable.

Sucky. Seems like it tries to open a sasl connection which is already
open. Anyway, this does not render the package unusable - only in your
case but certainly not for all Debian users around the world.

I'll try to reproduce the problem here.

Greetings

 Torsten

[Torsten Landschoff (t-landschoff)]

severity 278471 serious

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Wed, 27 Oct 2004 09:20:32 +0200
From: Torsten Landschoff <email address hidden>
To: Pietro Abate <email address hidden>, <email address hidden>
Subject: Re: Bug#278471: ldap-utils: Assertion `lc->lconn_sasl_ctx == ((void *)0)' failed

--bg08WKrSYDhXBjb5
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi Pietro,=20

On Wed, Oct 27, 2004 at 03:10:25PM +1000, Pietro Abate wrote:
> I'm using ldap together with kerberos (that works ok). After installing
> the following packages libnss-ldap libdb3-util libsasl7 I get
>=20
> pulp:@NEW~# ldapsearch=20
> ldapsearch:
> /home/roland/debian/openldap/build/2.1.30/openldap2-2.1.30/libraries/libl=
dap/cyrus.c:468:
> ldap_int_sasl_open: Assertion `lc->lconn_sasl_ctx =3D=3D ((void *)0)'
> failed.
=2E..
> O didn't find any useful information about this bug in the BS or on the
> web... I've reproduced this bug on two different machines, one running
> testing and one unstable.

Sucky. Seems like it tries to open a sasl connection which is already
open. Anyway, this does not render the package unusable - only in your
case but certainly not for all Debian users around the world.=20

I'll try to reproduce the problem here.

Greetings

 Torsten

--bg08WKrSYDhXBjb5
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBf0xAdQgHtVUb5EcRAkPtAJ9oKBX4RrwnG//O1CV5Z2ca7Yb9JwCcDUK3
mZNw7z01Y/V2B+0qIHMnsOY=
=jBwP
-----END PGP SIGNATURE-----

--bg08WKrSYDhXBjb5--

[Debian Bug Importer (debzilla)]

Message-Id: <email address hidden>
Date: Wed, 27 Oct 2004 09:20:50 +0200 (CEST)
From: <email address hidden> (Torsten Landschoff)
To: <email address hidden>
Subject: severity of 278471 is serious

severity 278471 serious

[Robert Bradford (robster)]

Torsten,

I think you have set the severity incorrectly for this bug, serious is used for
policy violations (which this is not). And as you said yourself this bug only
appears to be a problem for this one user so I suggest that you change the
severity to important. Unless of course you feel that this bug makes this
version unsuitable for release.

Cheers,

Rob
--
Rob Bradford
http://www.robster.org.uk | GPG: DF81EE83

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Fri, 7 Jan 2005 12:10:01 +0000
From: Rob Bradford <email address hidden>
To: <email address hidden>
Subject: Bug severity?

Torsten,

I think you have set the severity incorrectly for this bug, serious is used for
policy violations (which this is not). And as you said yourself this bug only
appears to be a problem for this one user so I suggest that you change the
severity to important. Unless of course you feel that this bug makes this
version unsuitable for release.

Cheers,

Rob
--
Rob Bradford
http://www.robster.org.uk | GPG: DF81EE83

[Stephen Frost (sfrost)]

* Pietro Abate (<email address hidden>) wrote:
> I'm using ldap together with kerberos (that works ok). After installing
> the following packages libnss-ldap libdb3-util libsasl7 I get

Something about that doesn't add up- why are you installing libsasl7?
Everything should be using libsasl2. Can you please do:

ldd /usr/bin/ldapsearch

and send us the results?

 Thanks,

  Stephen

[Stephen Frost (sfrost)]

severity 278471 important

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Wed, 19 Jan 2005 09:59:30 -0500
From: Stephen Frost <email address hidden>
To: Pietro Abate <email address hidden>, <email address hidden>
Cc: Debian Bug Tracking System <email address hidden>
Subject: Re: [debian-openldap] Bug#278471: ldap-utils: Assertion `lc->lconn_sasl_ctx == ((void *)0)'
 failed

--SYGqW+RyaagRTPp4
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

* Pietro Abate (<email address hidden>) wrote:
> I'm using ldap together with kerberos (that works ok). After installing
> the following packages libnss-ldap libdb3-util libsasl7 I get

Something about that doesn't add up- why are you installing libsasl7?
Everything should be using libsasl2. Can you please do:

ldd /usr/bin/ldapsearch

and send us the results?

 Thanks,

  Stephen

--SYGqW+RyaagRTPp4
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFB7nXSrzgMPqB3kigRAs61AJ9fZ1i8BAP4LfyaRoJxHoLDHV2jVACeJjR7
czcy5T3VvPOuBKfqkYfs39c=
=Dyay
-----END PGP SIGNATURE-----

--SYGqW+RyaagRTPp4--

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Wed, 19 Jan 2005 10:31:33 -0500
From: Stephen Frost <email address hidden>
To: <email address hidden>
Subject: Should be important, not serious

severity 278471 important

[Michael Tautschnig (mt-debian)]

Hi!

I was able to create strace-logs showing the same operation, one with the
failing assertion (log.failed) and one without it (log.ok).

My command was: getent passwd 50 and getent passwd 51 - I had to retry several
times until I finally got the assertion, but I think I can reproduce it at any
time.

Note, that I'm using

URI ldaps://host1 ldaps://host2

in ldap.conf/libnss-ldap.conf/pam_ldap.conf

HTH,
Michael

[Michael Tautschnig (mt-debian)]

Hi all,

Actually I can't reproduce the problem anymore, probably since a few months
already. I'd thus suggest tagging it unreproducible or even closing it.

Best,
Michael

[Russ Allbery (rra-debian)]

As noted in the bug log, this bug is no longer reproducible. Lots of
people are using the LDAP command-line utilities with SASL on a daily
basis, so whatever was wrong has probably been fixed.

Please feel free to reopen this bug if you're still seeing problems (or
even better, open a new bug with more detailed tracing and error
information).

--
Russ Allbery (<email address hidden>) <http://www.eyrie.org/~eagle/>