| 2014-01-14 16:05:07 |
MRATT |
bug |
|
|
added bug |
| 2014-01-14 16:05:07 |
MRATT |
attachment added |
|
ibm-domino-bindsock_strace.zip https://bugs.launchpad.net/bugs/1269053/+attachment/3948585/+files/ibm-domino-bindsock_strace.zip |
|
| 2014-01-14 17:00:19 |
Andy Whitcroft |
linux-lts-quantal (Ubuntu): status |
New |
In Progress |
|
| 2014-01-14 17:00:22 |
Andy Whitcroft |
linux-lts-quantal (Ubuntu): assignee |
|
Andy Whitcroft (apw) |
|
| 2014-01-14 17:00:24 |
Andy Whitcroft |
linux-lts-quantal (Ubuntu): importance |
Undecided |
Medium |
|
| 2014-01-14 17:00:57 |
Andy Whitcroft |
summary |
IBM Domino 'bindsock' cannot bind to ports <1024 since recent kernel 3.5.0-45 |
IBM Domino 'bindsock' cannot bind to ports <1024 since recent kernel 3.5.0-45,68 |
|
| 2014-01-14 17:01:03 |
Andy Whitcroft |
summary |
IBM Domino 'bindsock' cannot bind to ports <1024 since recent kernel 3.5.0-45,68 |
IBM Domino 'bindsock' cannot bind to ports <1024 since recent kernel 3.5.0-45.68 |
|
| 2014-01-14 20:47:18 |
Andy Whitcroft |
bug task added |
|
linux (Ubuntu) |
|
| 2014-01-14 20:47:47 |
Andy Whitcroft |
nominated for series |
|
Ubuntu Precise |
|
| 2014-01-14 20:47:47 |
Andy Whitcroft |
bug task added |
|
linux (Ubuntu Precise) |
|
| 2014-01-14 20:47:47 |
Andy Whitcroft |
bug task added |
|
linux-lts-quantal (Ubuntu Precise) |
|
| 2014-01-14 20:47:47 |
Andy Whitcroft |
nominated for series |
|
Ubuntu Quantal |
|
| 2014-01-14 20:47:47 |
Andy Whitcroft |
bug task added |
|
linux (Ubuntu Quantal) |
|
| 2014-01-14 20:47:47 |
Andy Whitcroft |
bug task added |
|
linux-lts-quantal (Ubuntu Quantal) |
|
| 2014-01-14 20:47:47 |
Andy Whitcroft |
nominated for series |
|
Ubuntu Trusty |
|
| 2014-01-14 20:47:47 |
Andy Whitcroft |
bug task added |
|
linux (Ubuntu Trusty) |
|
| 2014-01-14 20:47:47 |
Andy Whitcroft |
bug task added |
|
linux-lts-quantal (Ubuntu Trusty) |
|
| 2014-01-14 20:47:47 |
Andy Whitcroft |
nominated for series |
|
Ubuntu Saucy |
|
| 2014-01-14 20:47:47 |
Andy Whitcroft |
bug task added |
|
linux (Ubuntu Saucy) |
|
| 2014-01-14 20:47:47 |
Andy Whitcroft |
bug task added |
|
linux-lts-quantal (Ubuntu Saucy) |
|
| 2014-01-14 20:48:20 |
Andy Whitcroft |
bug task added |
|
linux-lts-saucy (Ubuntu) |
|
| 2014-01-14 20:48:33 |
Andy Whitcroft |
linux (Ubuntu Trusty): status |
New |
Fix Released |
|
| 2014-01-14 20:48:47 |
Andy Whitcroft |
linux (Ubuntu Trusty): assignee |
|
Andy Whitcroft (apw) |
|
| 2014-01-14 20:49:11 |
Andy Whitcroft |
linux-lts-quantal (Ubuntu Trusty): importance |
Medium |
Undecided |
|
| 2014-01-14 20:49:11 |
Andy Whitcroft |
linux-lts-quantal (Ubuntu Trusty): status |
In Progress |
Invalid |
|
| 2014-01-14 20:49:11 |
Andy Whitcroft |
linux-lts-quantal (Ubuntu Trusty): assignee |
Andy Whitcroft (apw) |
|
|
| 2014-01-14 20:49:27 |
Andy Whitcroft |
linux-lts-saucy (Ubuntu Trusty): status |
New |
Invalid |
|
| 2014-01-14 20:49:40 |
Andy Whitcroft |
linux-lts-saucy (Ubuntu Saucy): status |
New |
Invalid |
|
| 2014-01-14 20:49:56 |
Andy Whitcroft |
linux-lts-saucy (Ubuntu Quantal): status |
New |
Invalid |
|
| 2014-01-14 20:50:49 |
Andy Whitcroft |
linux-lts-saucy (Ubuntu Precise): importance |
Undecided |
Medium |
|
| 2014-01-14 20:50:49 |
Andy Whitcroft |
linux-lts-saucy (Ubuntu Precise): status |
New |
In Progress |
|
| 2014-01-14 20:50:49 |
Andy Whitcroft |
linux-lts-saucy (Ubuntu Precise): assignee |
|
Andy Whitcroft (apw) |
|
| 2014-01-14 20:51:06 |
Andy Whitcroft |
linux-lts-quantal (Ubuntu Saucy): status |
New |
Invalid |
|
| 2014-01-14 20:51:16 |
Andy Whitcroft |
linux-lts-quantal (Ubuntu Quantal): status |
New |
Invalid |
|
| 2014-01-14 20:51:34 |
Andy Whitcroft |
linux-lts-quantal (Ubuntu Precise): importance |
Undecided |
Medium |
|
| 2014-01-14 20:51:34 |
Andy Whitcroft |
linux-lts-quantal (Ubuntu Precise): status |
New |
In Progress |
|
| 2014-01-14 20:51:55 |
Andy Whitcroft |
bug task added |
|
linux-lts-raring (Ubuntu) |
|
| 2014-01-14 20:52:13 |
Andy Whitcroft |
linux-lts-raring (Ubuntu Trusty): status |
New |
Invalid |
|
| 2014-01-14 20:52:27 |
Andy Whitcroft |
linux-lts-raring (Ubuntu Saucy): status |
New |
Invalid |
|
| 2014-01-14 20:52:39 |
Andy Whitcroft |
linux-lts-raring (Ubuntu Quantal): status |
New |
Invalid |
|
| 2014-01-14 20:53:02 |
Andy Whitcroft |
linux-lts-raring (Ubuntu Precise): importance |
Undecided |
Medium |
|
| 2014-01-14 20:53:02 |
Andy Whitcroft |
linux-lts-raring (Ubuntu Precise): status |
New |
In Progress |
|
| 2014-01-14 20:53:02 |
Andy Whitcroft |
linux-lts-raring (Ubuntu Precise): assignee |
|
Andy Whitcroft (apw) |
|
| 2014-01-14 20:53:19 |
Andy Whitcroft |
linux-lts-quantal (Ubuntu Precise): assignee |
|
Andy Whitcroft (apw) |
|
| 2014-01-14 20:54:08 |
Andy Whitcroft |
linux (Ubuntu Saucy): importance |
Undecided |
Medium |
|
| 2014-01-14 20:54:08 |
Andy Whitcroft |
linux (Ubuntu Saucy): status |
New |
In Progress |
|
| 2014-01-14 20:54:08 |
Andy Whitcroft |
linux (Ubuntu Saucy): assignee |
|
Andy Whitcroft (apw) |
|
| 2014-01-14 20:54:30 |
Andy Whitcroft |
linux (Ubuntu Quantal): importance |
Undecided |
Medium |
|
| 2014-01-14 20:54:30 |
Andy Whitcroft |
linux (Ubuntu Quantal): status |
New |
In Progress |
|
| 2014-01-14 20:54:30 |
Andy Whitcroft |
linux (Ubuntu Quantal): assignee |
|
Andy Whitcroft (apw) |
|
| 2014-01-14 20:54:52 |
Andy Whitcroft |
linux (Ubuntu Precise): importance |
Undecided |
Medium |
|
| 2014-01-14 20:54:52 |
Andy Whitcroft |
linux (Ubuntu Precise): status |
New |
Fix Committed |
|
| 2014-01-14 20:54:52 |
Andy Whitcroft |
linux (Ubuntu Precise): assignee |
|
Andy Whitcroft (apw) |
|
| 2014-01-14 20:55:11 |
Andy Whitcroft |
linux (Ubuntu Trusty): assignee |
Andy Whitcroft (apw) |
|
|
| 2014-01-15 14:03:28 |
Andy Whitcroft |
linux-lts-saucy (Ubuntu Saucy): status |
Invalid |
In Progress |
|
| 2014-01-15 14:30:44 |
Andy Whitcroft |
linux-lts-saucy (Ubuntu Saucy): status |
In Progress |
Invalid |
|
| 2014-01-15 15:43:34 |
Andy Whitcroft |
linux (Ubuntu Quantal): status |
In Progress |
Fix Committed |
|
| 2014-01-15 15:43:47 |
Andy Whitcroft |
linux (Ubuntu Saucy): status |
In Progress |
Fix Committed |
|
| 2014-01-15 15:46:12 |
Andy Whitcroft |
linux-lts-raring (Ubuntu Precise): status |
In Progress |
Fix Committed |
|
| 2014-01-15 15:46:20 |
Andy Whitcroft |
linux-lts-quantal (Ubuntu Precise): status |
In Progress |
Fix Committed |
|
| 2014-01-15 15:46:34 |
Andy Whitcroft |
linux-lts-saucy (Ubuntu Precise): status |
In Progress |
Fix Committed |
|
| 2014-01-22 20:08:41 |
Andy Whitcroft |
description |
Something has changed in Ubuntu's Kernel 3.5.0-45 32 & 64-bit Intel, has prevented IBM Domino's "/opt/ibm/domino/notes/latest/linux/bindsock" binary that runs as root (setuid) to get ports lower than 1024 for it's LDAP, SMTP, IMAP, POP3, and HTTP processes. The IBM Domino Application Server's parent process "/opt/ibm/domino/notes/latest/linux/server" runs as a Service Account or a normal non-admin user, that launches "bindsock"and others like "http", "ldap"....
In the Live Domino Console we're seeing the Application Server report:
"Listener failure: 'bindsock' is missing, not executable, not owned by root, not setuid root or user needs net_privaddr privilege."
Another thing in the Live Domino Console, which is unusual is:
"Error_CmdToDo_INVAL"... might be an IBM thang.
A number of us have to hold back the kernel now and there's lots of scratching going on.
http://www-10.lotus.com/ldd/ndseforum.nsf/xpTopicThread.xsp?documentId=485F5F092833BCBE85257C33006AC7A3
It does seem to be limited to IBM Domino's "bindsock" binary and other things are just fine, such as Nginx.
I have attached some files within the zip "ibm-domino-bindsock_strace.zip"
>>bindsock_binary_strace.txt
This is just running strace against the binary that isn't running in any process.
>> domino-server-pid1052_strace-f.txt
The IBM Domino Application Server ("/opt/ibm/domino/notes/latest/linux/server") is running as PID 1052 so this is what I applied "strace -f" to and towards the end, I told "server" to start the "http" process ("l http") which would then try launch "bindsock" (I hope).
Hopeully this first attempt at strace provides some good info for you kind folks :-)
Many thanks
MR
ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: linux-image-3.5.0-45-generic 3.5.0-45.68~precise1
ProcVersionSignature: Ubuntu 3.5.0-45.68~precise1-generic 3.5.7.26
Uname: Linux 3.5.0-45-generic x86_64
AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.25.
AplayDevices: Error: [Errno 2] No such file or directory
ApportVersion: 2.0.1-0ubuntu17.6
Architecture: amd64
ArecordDevices: Error: [Errno 2] No such file or directory
AudioDevicesInUse: Error: [Errno 2] No such file or directory
CRDA: Error: [Errno 2] No such file or directory
Card0.Amixer.info: Error: [Errno 2] No such file or directory
Card0.Amixer.values: Error: [Errno 2] No such file or directory
Date: Tue Jan 14 15:33:47 2014
HibernationDevice: RESUME=UUID=474adefd-59c4-4582-8d03-3c570137809d
InstallationMedia: Ubuntu-Server 12.04.2 LTS "Precise Pangolin" - Release amd64 (20130214)
IwConfig: Error: [Errno 2] No such file or directory
Lsusb:
Bus 002 Device 002: ID 80ee:0021 VirtualBox USB Tablet
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
MachineType: innotek GmbH VirtualBox
MarkForUpload: True
ProcEnviron:
SHELL=/bin/bash
TERM=xterm
PATH=(custom, no user)
LANG=en_GB.UTF-8
LANGUAGE=en_GB:en
ProcFB: 0 VESA VGA
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.5.0-45-generic root=UUID=a2842a37-9023-4e21-8460-a565465b7f67 ro
RelatedPackageVersions:
linux-restricted-modules-3.5.0-45-generic N/A
linux-backports-modules-3.5.0-45-generic N/A
linux-firmware 1.79.9
RfKill: Error: [Errno 2] No such file or directory
SourcePackage: linux-lts-quantal
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 12/01/2006
dmi.bios.vendor: innotek GmbH
dmi.bios.version: VirtualBox
dmi.board.name: VirtualBox
dmi.board.vendor: Oracle Corporation
dmi.board.version: 1.2
dmi.chassis.type: 1
dmi.chassis.vendor: Oracle Corporation
dmi.modalias: dmi:bvninnotekGmbH:bvrVirtualBox:bd12/01/2006:svninnotekGmbH:pnVirtualBox:pvr1.2:rvnOracleCorporation:rnVirtualBox:rvr1.2:cvnOracleCorporation:ct1:cvr:
dmi.product.name: VirtualBox
dmi.product.version: 1.2
dmi.sys.vendor: innotek GmbH |
Something has changed in Ubuntu's Kernel 3.5.0-45 32 & 64-bit Intel, has prevented IBM Domino's "/opt/ibm/domino/notes/latest/linux/bindsock" binary that runs as root (setuid) to get ports lower than 1024 for it's LDAP, SMTP, IMAP, POP3, and HTTP processes. The IBM Domino Application Server's parent process "/opt/ibm/domino/notes/latest/linux/server" runs as a Service Account or a normal non-admin user, that launches "bindsock"and others like "http", "ldap"....
In the Live Domino Console we're seeing the Application Server report:
"Listener failure: 'bindsock' is missing, not executable, not owned by root, not setuid root or user needs net_privaddr privilege."
Another thing in the Live Domino Console, which is unusual is:
"Error_CmdToDo_INVAL"... might be an IBM thang.
A number of us have to hold back the kernel now and there's lots of scratching going on.
http://www-10.lotus.com/ldd/ndseforum.nsf/xpTopicThread.xsp?documentId=485F5F092833BCBE85257C33006AC7A3
It does seem to be limited to IBM Domino's "bindsock" binary and other things are just fine, such as Nginx.
I have attached some files within the zip "ibm-domino-bindsock_strace.zip"
>>bindsock_binary_strace.txt
This is just running strace against the binary that isn't running in any process.
>> domino-server-pid1052_strace-f.txt
The IBM Domino Application Server ("/opt/ibm/domino/notes/latest/linux/server") is running as PID 1052 so this is what I applied "strace -f" to and towards the end, I told "server" to start the "http" process ("l http") which would then try launch "bindsock" (I hope).
Hopeully this first attempt at strace provides some good info for you kind folks :-)
Many thanks
MR
ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: linux-image-3.5.0-45-generic 3.5.0-45.68~precise1
ProcVersionSignature: Ubuntu 3.5.0-45.68~precise1-generic 3.5.7.26
Uname: Linux 3.5.0-45-generic x86_64
AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.25.
AplayDevices: Error: [Errno 2] No such file or directory
ApportVersion: 2.0.1-0ubuntu17.6
Architecture: amd64
ArecordDevices: Error: [Errno 2] No such file or directory
AudioDevicesInUse: Error: [Errno 2] No such file or directory
CRDA: Error: [Errno 2] No such file or directory
Card0.Amixer.info: Error: [Errno 2] No such file or directory
Card0.Amixer.values: Error: [Errno 2] No such file or directory
Date: Tue Jan 14 15:33:47 2014
HibernationDevice: RESUME=UUID=474adefd-59c4-4582-8d03-3c570137809d
InstallationMedia: Ubuntu-Server 12.04.2 LTS "Precise Pangolin" - Release amd64 (20130214)
IwConfig: Error: [Errno 2] No such file or directory
Lsusb:
Bus 002 Device 002: ID 80ee:0021 VirtualBox USB Tablet
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
MachineType: innotek GmbH VirtualBox
MarkForUpload: True
ProcEnviron:
SHELL=/bin/bash
TERM=xterm
PATH=(custom, no user)
LANG=en_GB.UTF-8
LANGUAGE=en_GB:en
ProcFB: 0 VESA VGA
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.5.0-45-generic root=UUID=a2842a37-9023-4e21-8460-a565465b7f67 ro
RelatedPackageVersions:
linux-restricted-modules-3.5.0-45-generic N/A
linux-backports-modules-3.5.0-45-generic N/A
linux-firmware 1.79.9
RfKill: Error: [Errno 2] No such file or directory
SourcePackage: linux-lts-quantal
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 12/01/2006
dmi.bios.vendor: innotek GmbH
dmi.bios.version: VirtualBox
dmi.board.name: VirtualBox
dmi.board.vendor: Oracle Corporation
dmi.board.version: 1.2
dmi.chassis.type: 1
dmi.chassis.vendor: Oracle Corporation
dmi.modalias: dmi:bvninnotekGmbH:bvrVirtualBox:bd12/01/2006:svninnotekGmbH:pnVirtualBox:pvr1.2:rvnOracleCorporation:rnVirtualBox:rvr1.2:cvnOracleCorporation:ct1:cvr:
dmi.product.name: VirtualBox
dmi.product.version: 1.2
dmi.sys.vendor: innotek GmbH
break-fix: - db31c55a6fb245fdbb752a2ca4aefec89afabb06 |
|
| 2014-01-22 20:08:54 |
Andy Whitcroft |
tags |
amd64 apport-bug bindsock domino ibm precise qa-kernel-lts-testing |
amd64 apport-bug bindsock domino ibm linux-break-fix precise qa-kernel-lts-testing |
|
| 2014-01-22 21:59:49 |
Andy Whitcroft |
linux-lts-quantal (Ubuntu Precise): status |
Fix Committed |
Confirmed |
|
| 2014-01-23 11:45:57 |
Andy Whitcroft |
tags |
amd64 apport-bug bindsock domino ibm linux-break-fix precise qa-kernel-lts-testing |
amd64 apport-bug bindsock domino ibm kernel-bug-break-fix precise qa-kernel-lts-testing |
|
| 2014-01-23 14:30:18 |
Andy Whitcroft |
tags |
amd64 apport-bug bindsock domino ibm kernel-bug-break-fix precise qa-kernel-lts-testing |
amd64 apport-bug bindsock domino ibm kernel-bug-break-fix precise qa-kernel-lts-testing test-apw |
|
| 2014-01-23 14:30:32 |
Andy Whitcroft |
tags |
amd64 apport-bug bindsock domino ibm kernel-bug-break-fix precise qa-kernel-lts-testing test-apw |
amd64 apport-bug bindsock domino ibm kernel-bug-break-fix precise qa-kernel-lts-testing |
|
| 2014-01-23 18:31:02 |
Andy Whitcroft |
description |
Something has changed in Ubuntu's Kernel 3.5.0-45 32 & 64-bit Intel, has prevented IBM Domino's "/opt/ibm/domino/notes/latest/linux/bindsock" binary that runs as root (setuid) to get ports lower than 1024 for it's LDAP, SMTP, IMAP, POP3, and HTTP processes. The IBM Domino Application Server's parent process "/opt/ibm/domino/notes/latest/linux/server" runs as a Service Account or a normal non-admin user, that launches "bindsock"and others like "http", "ldap"....
In the Live Domino Console we're seeing the Application Server report:
"Listener failure: 'bindsock' is missing, not executable, not owned by root, not setuid root or user needs net_privaddr privilege."
Another thing in the Live Domino Console, which is unusual is:
"Error_CmdToDo_INVAL"... might be an IBM thang.
A number of us have to hold back the kernel now and there's lots of scratching going on.
http://www-10.lotus.com/ldd/ndseforum.nsf/xpTopicThread.xsp?documentId=485F5F092833BCBE85257C33006AC7A3
It does seem to be limited to IBM Domino's "bindsock" binary and other things are just fine, such as Nginx.
I have attached some files within the zip "ibm-domino-bindsock_strace.zip"
>>bindsock_binary_strace.txt
This is just running strace against the binary that isn't running in any process.
>> domino-server-pid1052_strace-f.txt
The IBM Domino Application Server ("/opt/ibm/domino/notes/latest/linux/server") is running as PID 1052 so this is what I applied "strace -f" to and towards the end, I told "server" to start the "http" process ("l http") which would then try launch "bindsock" (I hope).
Hopeully this first attempt at strace provides some good info for you kind folks :-)
Many thanks
MR
ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: linux-image-3.5.0-45-generic 3.5.0-45.68~precise1
ProcVersionSignature: Ubuntu 3.5.0-45.68~precise1-generic 3.5.7.26
Uname: Linux 3.5.0-45-generic x86_64
AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.25.
AplayDevices: Error: [Errno 2] No such file or directory
ApportVersion: 2.0.1-0ubuntu17.6
Architecture: amd64
ArecordDevices: Error: [Errno 2] No such file or directory
AudioDevicesInUse: Error: [Errno 2] No such file or directory
CRDA: Error: [Errno 2] No such file or directory
Card0.Amixer.info: Error: [Errno 2] No such file or directory
Card0.Amixer.values: Error: [Errno 2] No such file or directory
Date: Tue Jan 14 15:33:47 2014
HibernationDevice: RESUME=UUID=474adefd-59c4-4582-8d03-3c570137809d
InstallationMedia: Ubuntu-Server 12.04.2 LTS "Precise Pangolin" - Release amd64 (20130214)
IwConfig: Error: [Errno 2] No such file or directory
Lsusb:
Bus 002 Device 002: ID 80ee:0021 VirtualBox USB Tablet
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
MachineType: innotek GmbH VirtualBox
MarkForUpload: True
ProcEnviron:
SHELL=/bin/bash
TERM=xterm
PATH=(custom, no user)
LANG=en_GB.UTF-8
LANGUAGE=en_GB:en
ProcFB: 0 VESA VGA
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.5.0-45-generic root=UUID=a2842a37-9023-4e21-8460-a565465b7f67 ro
RelatedPackageVersions:
linux-restricted-modules-3.5.0-45-generic N/A
linux-backports-modules-3.5.0-45-generic N/A
linux-firmware 1.79.9
RfKill: Error: [Errno 2] No such file or directory
SourcePackage: linux-lts-quantal
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 12/01/2006
dmi.bios.vendor: innotek GmbH
dmi.bios.version: VirtualBox
dmi.board.name: VirtualBox
dmi.board.vendor: Oracle Corporation
dmi.board.version: 1.2
dmi.chassis.type: 1
dmi.chassis.vendor: Oracle Corporation
dmi.modalias: dmi:bvninnotekGmbH:bvrVirtualBox:bd12/01/2006:svninnotekGmbH:pnVirtualBox:pvr1.2:rvnOracleCorporation:rnVirtualBox:rvr1.2:cvnOracleCorporation:ct1:cvr:
dmi.product.name: VirtualBox
dmi.product.version: 1.2
dmi.sys.vendor: innotek GmbH
break-fix: - db31c55a6fb245fdbb752a2ca4aefec89afabb06 |
Something has changed in Ubuntu's Kernel 3.5.0-45 32 & 64-bit Intel, has prevented IBM Domino's "/opt/ibm/domino/notes/latest/linux/bindsock" binary that runs as root (setuid) to get ports lower than 1024 for it's LDAP, SMTP, IMAP, POP3, and HTTP processes. The IBM Domino Application Server's parent process "/opt/ibm/domino/notes/latest/linux/server" runs as a Service Account or a normal non-admin user, that launches "bindsock"and others like "http", "ldap"....
In the Live Domino Console we're seeing the Application Server report:
"Listener failure: 'bindsock' is missing, not executable, not owned by root, not setuid root or user needs net_privaddr privilege."
Another thing in the Live Domino Console, which is unusual is:
"Error_CmdToDo_INVAL"... might be an IBM thang.
A number of us have to hold back the kernel now and there's lots of scratching going on.
http://www-10.lotus.com/ldd/ndseforum.nsf/xpTopicThread.xsp?documentId=485F5F092833BCBE85257C33006AC7A3
It does seem to be limited to IBM Domino's "bindsock" binary and other things are just fine, such as Nginx.
I have attached some files within the zip "ibm-domino-bindsock_strace.zip"
>>bindsock_binary_strace.txt
This is just running strace against the binary that isn't running in any process.
>> domino-server-pid1052_strace-f.txt
The IBM Domino Application Server ("/opt/ibm/domino/notes/latest/linux/server") is running as PID 1052 so this is what I applied "strace -f" to and towards the end, I told "server" to start the "http" process ("l http") which would then try launch "bindsock" (I hope).
Hopeully this first attempt at strace provides some good info for you kind folks :-)
Many thanks
MR
ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: linux-image-3.5.0-45-generic 3.5.0-45.68~precise1
ProcVersionSignature: Ubuntu 3.5.0-45.68~precise1-generic 3.5.7.26
Uname: Linux 3.5.0-45-generic x86_64
AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.25.
AplayDevices: Error: [Errno 2] No such file or directory
ApportVersion: 2.0.1-0ubuntu17.6
Architecture: amd64
ArecordDevices: Error: [Errno 2] No such file or directory
AudioDevicesInUse: Error: [Errno 2] No such file or directory
CRDA: Error: [Errno 2] No such file or directory
Card0.Amixer.info: Error: [Errno 2] No such file or directory
Card0.Amixer.values: Error: [Errno 2] No such file or directory
Date: Tue Jan 14 15:33:47 2014
HibernationDevice: RESUME=UUID=474adefd-59c4-4582-8d03-3c570137809d
InstallationMedia: Ubuntu-Server 12.04.2 LTS "Precise Pangolin" - Release amd64 (20130214)
IwConfig: Error: [Errno 2] No such file or directory
Lsusb:
Bus 002 Device 002: ID 80ee:0021 VirtualBox USB Tablet
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
MachineType: innotek GmbH VirtualBox
MarkForUpload: True
ProcEnviron:
SHELL=/bin/bash
TERM=xterm
PATH=(custom, no user)
LANG=en_GB.UTF-8
LANGUAGE=en_GB:en
ProcFB: 0 VESA VGA
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.5.0-45-generic root=UUID=a2842a37-9023-4e21-8460-a565465b7f67 ro
RelatedPackageVersions:
linux-restricted-modules-3.5.0-45-generic N/A
linux-backports-modules-3.5.0-45-generic N/A
linux-firmware 1.79.9
RfKill: Error: [Errno 2] No such file or directory
SourcePackage: linux-lts-quantal
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 12/01/2006
dmi.bios.vendor: innotek GmbH
dmi.bios.version: VirtualBox
dmi.board.name: VirtualBox
dmi.board.vendor: Oracle Corporation
dmi.board.version: 1.2
dmi.chassis.type: 1
dmi.chassis.vendor: Oracle Corporation
dmi.modalias: dmi:bvninnotekGmbH:bvrVirtualBox:bd12/01/2006:svninnotekGmbH:pnVirtualBox:pvr1.2:rvnOracleCorporation:rnVirtualBox:rvr1.2:cvnOracleCorporation:ct1:cvr:
dmi.product.name: VirtualBox
dmi.product.version: 1.2
dmi.sys.vendor: innotek GmbH
break-fix: 1661bf364ae9c506bc8795fef70d1532931be1e8 db31c55a6fb245fdbb752a2ca4aefec89afabb06 |
|
| 2014-02-06 18:40:54 |
Brad Figg |
tags |
amd64 apport-bug bindsock domino ibm kernel-bug-break-fix precise qa-kernel-lts-testing |
amd64 apport-bug bindsock domino ibm kernel-bug-break-fix precise qa-kernel-lts-testing verification-needed-saucy |
|
| 2014-02-07 09:46:19 |
Andy Whitcroft |
nominated for series |
|
Ubuntu Lucid |
|
| 2014-02-07 09:46:19 |
Andy Whitcroft |
bug task added |
|
linux (Ubuntu Lucid) |
|
| 2014-02-07 09:46:19 |
Andy Whitcroft |
bug task added |
|
linux-lts-quantal (Ubuntu Lucid) |
|
| 2014-02-07 09:46:19 |
Andy Whitcroft |
bug task added |
|
linux-lts-raring (Ubuntu Lucid) |
|
| 2014-02-07 09:46:19 |
Andy Whitcroft |
bug task added |
|
linux-lts-saucy (Ubuntu Lucid) |
|
| 2014-02-07 09:46:41 |
Andy Whitcroft |
bug task added |
|
linux-ec2 (Ubuntu) |
|
| 2014-02-07 09:47:01 |
Andy Whitcroft |
bug task added |
|
linux-armadaxp (Ubuntu) |
|
| 2014-02-07 09:47:22 |
Andy Whitcroft |
bug task added |
|
linux-ti-omap4 (Ubuntu) |
|
| 2014-02-07 09:49:49 |
Andy Whitcroft |
linux-armadaxp (Ubuntu): status |
New |
Invalid |
|
| 2014-02-07 09:49:52 |
Andy Whitcroft |
linux-lts-saucy (Ubuntu Lucid): status |
New |
Invalid |
|
| 2014-02-07 09:49:55 |
Andy Whitcroft |
linux-ec2 (Ubuntu Trusty): status |
New |
Invalid |
|
| 2014-02-07 09:49:58 |
Andy Whitcroft |
linux-lts-quantal (Ubuntu Lucid): status |
New |
Invalid |
|
| 2014-02-07 09:50:03 |
Andy Whitcroft |
linux-ti-omap4 (Ubuntu Lucid): status |
New |
Invalid |
|
| 2014-02-07 09:50:06 |
Andy Whitcroft |
linux-lts-raring (Ubuntu Lucid): status |
New |
Invalid |
|
| 2014-02-07 09:50:09 |
Andy Whitcroft |
linux-ec2 (Ubuntu Quantal): status |
New |
Invalid |
|
| 2014-02-07 09:50:13 |
Andy Whitcroft |
linux-ti-omap4 (Ubuntu Trusty): status |
New |
Invalid |
|
| 2014-02-07 09:50:57 |
Andy Whitcroft |
linux-armadaxp (Ubuntu Lucid): status |
New |
Invalid |
|
| 2014-02-07 09:51:00 |
Andy Whitcroft |
linux-ec2 (Ubuntu Saucy): status |
New |
Invalid |
|
| 2014-02-07 09:51:03 |
Andy Whitcroft |
linux-ec2 (Ubuntu Precise): status |
New |
Invalid |
|
| 2014-02-07 09:51:07 |
Andy Whitcroft |
linux-armadaxp (Ubuntu Saucy): status |
New |
Invalid |
|
| 2014-02-07 09:56:12 |
Andy Whitcroft |
linux (Ubuntu Lucid): status |
New |
Invalid |
|
| 2014-02-07 09:56:17 |
Andy Whitcroft |
linux-ec2 (Ubuntu Lucid): status |
New |
Invalid |
|
| 2014-02-07 09:56:23 |
Andy Whitcroft |
linux-ti-omap4 (Ubuntu Precise): status |
New |
Fix Committed |
|
| 2014-02-07 09:56:27 |
Andy Whitcroft |
linux-armadaxp (Ubuntu Precise): status |
New |
Fix Committed |
|
| 2014-02-07 09:56:31 |
Andy Whitcroft |
linux-ti-omap4 (Ubuntu Quantal): status |
New |
Confirmed |
|
| 2014-02-07 09:56:35 |
Andy Whitcroft |
linux-ti-omap4 (Ubuntu Saucy): status |
New |
Confirmed |
|
| 2014-02-07 09:56:40 |
Andy Whitcroft |
linux-armadaxp (Ubuntu Quantal): status |
New |
Confirmed |
|
| 2014-02-07 11:01:47 |
MRATT |
tags |
amd64 apport-bug bindsock domino ibm kernel-bug-break-fix precise qa-kernel-lts-testing verification-needed-saucy |
amd64 apport-bug bindsock domino ibm kernel-bug-break-fix precise qa-kernel-lts-testing verification-done-saucy |
|
| 2014-02-11 15:22:57 |
Hekmat Mahboubi |
bug |
|
|
added subscriber Hekmat Mahboubi |
| 2014-02-18 13:55:58 |
Launchpad Janitor |
linux (Ubuntu Saucy): status |
Fix Committed |
Fix Released |
|
| 2014-02-18 13:55:58 |
Launchpad Janitor |
cve linked |
|
2013-4587 |
|
| 2014-02-18 13:55:58 |
Launchpad Janitor |
cve linked |
|
2013-6367 |
|
| 2014-02-18 13:55:58 |
Launchpad Janitor |
cve linked |
|
2013-6368 |
|
| 2014-02-18 13:55:58 |
Launchpad Janitor |
cve linked |
|
2013-6376 |
|
| 2014-02-18 15:08:17 |
Andy Whitcroft |
linux (Ubuntu Precise): status |
Fix Committed |
Fix Released |
|
| 2014-02-18 15:08:24 |
Andy Whitcroft |
linux-ti-omap4 (Ubuntu Precise): status |
Fix Committed |
Fix Released |
|
| 2014-02-18 15:46:56 |
Launchpad Janitor |
linux-lts-saucy (Ubuntu Precise): status |
Fix Committed |
Fix Released |
|
| 2014-02-18 15:47:02 |
Launchpad Janitor |
linux-lts-saucy (Ubuntu Precise): status |
Fix Committed |
Fix Released |
|
| 2014-02-19 18:05:31 |
Andy Whitcroft |
linux-armadaxp (Ubuntu Precise): status |
Fix Committed |
Fix Released |
|
| 2014-02-19 22:29:28 |
Andy Whitcroft |
linux-lts-quantal (Ubuntu Precise): status |
Confirmed |
Fix Committed |
|
| 2014-02-20 16:18:19 |
Andy Whitcroft |
linux-armadaxp (Ubuntu Quantal): status |
Confirmed |
Fix Committed |
|
| 2014-02-24 15:26:53 |
Brad Figg |
tags |
amd64 apport-bug bindsock domino ibm kernel-bug-break-fix precise qa-kernel-lts-testing verification-done-saucy |
amd64 apport-bug bindsock domino ibm kernel-bug-break-fix precise qa-kernel-lts-testing verification-done-saucy verification-needed-quantal |
|
| 2014-02-24 18:47:52 |
Andy Whitcroft |
linux-ti-omap4 (Ubuntu Quantal): status |
Confirmed |
Fix Committed |
|
| 2014-02-24 18:47:57 |
Andy Whitcroft |
linux-ti-omap4 (Ubuntu Saucy): status |
Confirmed |
Fix Committed |
|
| 2014-02-25 13:12:33 |
MRATT |
tags |
amd64 apport-bug bindsock domino ibm kernel-bug-break-fix precise qa-kernel-lts-testing verification-done-saucy verification-needed-quantal |
amd64 apport-bug bindsock domino ibm kernel-bug-break-fix precise qa-kernel-lts-testing verification-done-quantal verification-done-saucy |
|
| 2014-03-06 15:59:22 |
Launchpad Janitor |
linux-lts-quantal (Ubuntu Precise): status |
Fix Committed |
Fix Released |
|
| 2014-03-06 15:59:22 |
Launchpad Janitor |
cve linked |
|
2014-1874 |
|
| 2014-03-06 15:59:26 |
Launchpad Janitor |
linux-lts-quantal (Ubuntu Precise): status |
Fix Committed |
Fix Released |
|
| 2014-03-06 15:59:26 |
Launchpad Janitor |
linux-lts-raring (Ubuntu Precise): status |
Fix Committed |
Fix Released |
|
| 2014-03-06 15:59:26 |
Launchpad Janitor |
cve linked |
|
2013-4579 |
|
| 2014-03-06 15:59:26 |
Launchpad Janitor |
cve linked |
|
2013-6380 |
|
| 2014-03-06 16:11:06 |
Launchpad Janitor |
linux (Ubuntu Quantal): status |
Fix Committed |
Fix Released |
|
| 2014-03-06 16:11:07 |
Launchpad Janitor |
linux (Ubuntu Quantal): status |
Fix Committed |
Fix Released |
|
| 2014-03-06 16:11:48 |
Launchpad Janitor |
linux-ti-omap4 (Ubuntu Quantal): status |
Fix Committed |
Fix Released |
|
| 2014-03-06 16:11:48 |
Launchpad Janitor |
linux-ti-omap4 (Ubuntu Quantal): status |
Fix Committed |
Fix Released |
|
| 2014-03-06 16:17:12 |
Launchpad Janitor |
linux-armadaxp (Ubuntu Quantal): status |
Fix Committed |
Fix Released |
|
| 2014-03-06 16:47:40 |
Launchpad Janitor |
linux-ti-omap4 (Ubuntu Saucy): status |
Fix Committed |
Fix Released |
|
| 2014-03-06 18:40:49 |
Andy Whitcroft |
tags |
amd64 apport-bug bindsock domino ibm kernel-bug-break-fix precise qa-kernel-lts-testing verification-done-quantal verification-done-saucy |
amd64 apport-bug bindsock domino ibm precise qa-kernel-lts-testing verification-done-quantal verification-done-saucy |
|
| 2014-03-06 18:41:56 |
Andy Whitcroft |
tags |
amd64 apport-bug bindsock domino ibm precise qa-kernel-lts-testing verification-done-quantal verification-done-saucy |
amd64 apport-bug bindsock domino ibm kernel-bug-break-fix-complete precise qa-kernel-lts-testing verification-done-quantal verification-done-saucy |
|
| 2014-06-20 18:49:46 |
flexion |
bug |
|
|
added subscriber flexion |
| 2014-07-09 13:12:57 |
László Meskó |
bug |
|
|
added subscriber László Meskó |
| 2014-07-25 18:14:54 |
cws3400 |
bug |
|
|
added subscriber cws3400 |
