Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 581172 - net-fs/autofs-5.1.1-r1 with GSSAPI and ldap maps: SIGSEGV in err_string_data_LHASH_COMP
Summary: net-fs/autofs-5.1.1-r1 with GSSAPI and ldap maps: SIGSEGV in err_string_data_...
Status: RESOLVED NEEDINFO
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Yixun Lan
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-04-25 14:30 UTC by Spooky Ghost
Modified: 2019-08-12 21:25 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Spooky Ghost 2016-04-25 14:30:33 UTC
LDAP server: samba AD DC from Ubuntu Xenial 2:4.3.8+dfsg-0ubuntu1
Gentoo:  for x in net-fs/autofs net-nds/openldap dev-libs/openssl dev-libs/cyrus-sasl app-crypt/heimdal ; do equery l ${x} ; done
 * Searching for autofs in net-fs ...
[IP-] [  ] net-fs/autofs-5.1.1-r1:0
 * Searching for openldap in net-nds ...
[IP-] [  ] net-nds/openldap-2.4.38-r2:0
 * Searching for openssl in dev-libs ...
[IP-] [  ] dev-libs/openssl-1.0.2g-r2:0
 * Searching for cyrus-sasl in dev-libs ...
[I-O] [  ] dev-libs/cyrus-sasl-2.1.26-r9:2
 * Searching for heimdal in app-crypt ...
[IP-] [  ] app-crypt/heimdal-1.5.3-r2:0

I am using an additional patch for cyrus-sasl which I believe is related to #409897 and also https://bugzilla.novell.com/show_bug.cgi?id=775279 which solves a GSSAPI authentication problem.

My auto.master and other maps are all stored in the LDAP directory.  The maps are successfully reported with automount -m suggesting no issue with the configuration.  Running autofs as a daemon crashes when trying to mount an automounted directory.  gdb bt full shows the segmentation fault comes from OpenSSL libcrypto.so.1.0.0:

(gdb) bt full
#0  err_string_data_LHASH_COMP (arg1=0x7ffff3df5440, arg2=0x7fffebff91e0) at err.c:354
        a = 0x7ffff3df5440
        b = 0x7fffebff91e0
#1  0x00007ffff5caede0 in getrn (lh=lh@entry=0x5555557b0240, data=data@entry=0x7fffebff91e0, rhash=rhash@entry=0x7fffebff91a0) at lhash.c:427
        ret = 0x7ffff7f55960
        n1 = 0x5555557d1680
        hash = 336900394
        nn = <optimized out>
        cf = 0x7ffff5cb100a <err_string_data_LHASH_COMP>
#2  0x00007ffff5caf34f in lh_retrieve (lh=lh@entry=0x5555557b0240, data=data@entry=0x7fffebff91e0) at lhash.c:254
        hash = 336900394
        rn = <optimized out>
        ret = <optimized out>
#3  0x00007ffff5cb1535 in int_err_get_item (d=0x7fffebff91e0) at err.c:394
        p = <optimized out>
        hash = 0x5555557b0240
#4  0x00007ffff5cb1a63 in ERR_func_error_string (e=<optimized out>) at err.c:974
        d = {error = 336900096, string = 0xaa0798b0e00a8400 <error: Cannot access memory at address 0xaa0798b0e00a8400>}
        p = <optimized out>
        l = <optimized out>
        f = <optimized out>
#5  0x00007ffff33d9640 in ERR_load_SSL_strings () at ssl_err.c:832
No locals.
#6  0x00007ffff33cc70a in SSL_load_error_strings () at ssl_err2.c:67
No locals.
#7  0x00007ffff3a5a8c9 in tlso_init () at /var/tmp/portage/net-nds/openldap-2.4.38-r2/work/openldap-2.4.38/libraries/libldap/tls_o.c:160
No locals.
#8  0x00007ffff3a58a4e in ldap_int_tls_start (ld=ld@entry=0x7fffe000c750, conn=0x7fffe0000cb0, srv=srv@entry=0x0) at /var/tmp/portage/net-nds/openldap-2.4.38-r2/work/openldap-2.4.38/libraries/libldap/tls2.c:838
        sb = 0x7fffe000c6f0
        host = 0x7fffe000c690 "samba4dc0.ad.dingwall.me.uk"
        ssl = <optimized out>
        ret = <optimized out>
        __PRETTY_FUNCTION__ = "ldap_int_tls_start"
#9  0x00007ffff3a58c62 in ldap_start_tls_s (ld=0x7fffe000c750, serverctrls=serverctrls@entry=0x0, clientctrls=clientctrls@entry=0x0) at /var/tmp/portage/net-nds/openldap-2.4.38-r2/work/openldap-2.4.38/libraries/libldap/tls2.c:1040
        rc = 0
        rspoid = 0x7fffe00023b0 ""
        rspdata = 0x0
#10 0x00007ffff3c7e8e0 in init_ldap_connection (logopt=logopt@entry=1, uri=uri@entry=0x7fffe0000aa0 "ldap://samba4dc0.ad.dingwall.me.uk/", ctxt=ctxt@entry=0x7fffe0000980) at lookup_ldap.c:313
        ldap = <optimized out>
        timeout = {tv_sec = 4294967295, tv_usec = 0}
        net_timeout = {tv_sec = 8, tv_usec = 0}
        rv = <optimized out>
        __FUNCTION__ = "init_ldap_connection"
#11 0x00007ffff3c7e9f6 in do_connect (logopt=logopt@entry=1, conn=conn@entry=0x7fffebff9500, uri=0x7fffe0000aa0 "ldap://samba4dc0.ad.dingwall.me.uk/", ctxt=ctxt@entry=0x7fffe0000980) at lookup_ldap.c:645
        cur_host = 0x0
        ret = 0
        __FUNCTION__ = "do_connect"
#12 0x00007ffff3c7f31e in do_reconnect (logopt=1, conn=conn@entry=0x7fffebff9500, ctxt=ctxt@entry=0x7fffe0000980) at lookup_ldap.c:969
        ret = 2
        dcrv = 0
        rv = 0
        __FUNCTION__ = "do_reconnect"
#13 0x00007ffff3c82c5a in lookup_one (ctxt=0x7fffe0000980, qKey_len=9, qKey=0x7fffe0000be0 "distfiles", source=0x5555557fc1e0, ap=0x5555557fc810) at lookup_ldap.c:2983
        conn = {ldap = 0x0, sasl_conn = 0x0}
        rv = <optimized out>
        buf = '\000' <repeats 127 times>
        enc_len2 = 0
        we = <optimized out>
        query = <optimized out>
        entry = <optimized out>
        i = <optimized out>
        bvKey = <optimized out>
        class = <optimized out>
        enc_key1 = 0x0
        attrs = {0x0, 0x0, 0x0}
        scope = 2
        mc = 0x5555557fca70
        count = <optimized out>
        e = <optimized out>
        info = <optimized out>
        enc_key2 = 0x0
        bvValues = <optimized out>
        wild = 0
        ret = 8
        ldap = <optimized out>
        l = <optimized out>
        ql = <optimized out>
        result = 0x0
        enc_len1 = 0
#14 match_key (ctxt=0x7fffe0000980, key_len=9, key=0x7fffe0000be0 "distfiles", source=0x5555557fc1e0, ap=0x5555557fc810) at lookup_ldap.c:3482
        is_amd_format = <optimized out>
        buf = '\000' <repeats 127 times>
        lkp_key = <optimized out>
        prefix = <optimized out>
        ret = <optimized out>
#15 check_map_indirect (ctxt=0x7fffe0000980, key_len=9, key=0x7fffe0000be0 "distfiles", source=0x5555557fc1e0, ap=0x5555557fc810) at lookup_ldap.c:3569
        is_amd_format = 0
        mc = 0x5555557fca70
        me = <optimized out>
        ret = <optimized out>
        status = <optimized out>
        t_last_read = <optimized out>
        cur_state = 1
#16 lookup_mount (ap=0x5555557fc810, name=<optimized out>, name_len=<optimized out>, context=0x7fffe0000980) at lookup_ldap.c:3722
        ctxt = 0x7fffe0000980
        source = 0x5555557fc1e0
        mc = 0x5555557fca70
        me = <optimized out>
        key = "distfiles", '\000' <repeats 246 times>
        key_len = 9
        lkp_key = <optimized out>
        mapent = 0x0
        mapent_buf = '\000' <repeats 232 times>...
        buf = '\000' <repeats 127 times>
        status = 0
        ret = 1
        __FUNCTION__ = "lookup_mount"
#17 0x000055555556d54a in do_lookup_mount (ap=ap@entry=0x5555557fc810, map=map@entry=0x5555557fc1e0, name=name@entry=0x7fffe0000b93 "distfiles", name_len=name_len@entry=9) at lookup.c:766
        lookup = 0x7fffe0000900
        status = <optimized out>
        __FUNCTION__ = "do_lookup_mount"
#18 0x000055555556e1a4 in do_name_lookup_mount (name_len=9, name=0x7fffe0000b93 "distfiles", map=0x5555557fc1e0, ap=0x5555557fc810) at lookup.c:926
        path = <optimized out>
#19 lookup_nss_mount (ap=ap@entry=0x5555557fc810, source=source@entry=0x0, name=0x7fffe0000b93 "distfiles", name_len=9) at lookup.c:1102
        __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {2, -1294930843580510760, 2, 140737152800944, 93824995018768, 93824994627072, -4948886108412850728, -1294931005789450792}, __mask_was_saved = 0}}, __pad = {0x7fffebffec70,
            0x0, 0x0, 0x6e0000005b}}
        __cancel_arg = 0x5555557fc700
        __not_first_call = <optimized out>
        entry = 0x5555557fc700
        nsslist = {next = 0x8030, prev = 0x3}
        head = <optimized out>
        p = <optimized out>
        this = <optimized out>
        map = 0x5555557fc1e0
        status = <optimized out>
        result = 0
        __FUNCTION__ = "lookup_nss_mount"
#20 0x0000555555576d5c in do_remount_indirect (ap=ap@entry=0x5555557fc810, fd=24, path=path@entry=0x5555557fc910 "/misc") at mounts.c:1725
        ret = <optimized out>
        len = <optimized out>
        ops = 0x55555579ce00 <dev_ioctl_ops>
        status = 0
        de = 0x7fffe000c370
        buf = "/misc/distfiles", '\000' <repeats 33 times>, "/usr/lib64/autofs/lookup_ldap.so", '\000' <repeats 1880 times>...
        uid = 4294967295
        gid = 4294967295
        mounted = 5
        n = 2
#21 0x0000555555577218 in remount_active_mount (ap=ap@entry=0x5555557fc810, me=me@entry=0x0, path=path@entry=0x5555557fc910 "/misc", devid=<optimized out>, type=type@entry=1, ioctlfd=ioctlfd@entry=0x7fffebffea9c) at mounts.c:1831
        ops = 0x55555579ce00 <dev_ioctl_ops>
        str_type = 0x55555558a8ad "indirect"
        buf = "P\352\377\353\377\177\000\000\020\310\177UUU\000\000\213\200\017\000\000\000\000\000p\312\177UUU\000\000\213\200\017\000\000\000\000\000 \000\000\340\377\177\000\000\036", '\000' <repeats 11 times>, "UU\000\000\377\377\377\377\000\000\000\000\005\000\000\000\000\000\000\000\000\316yUUU\000\000\270\t,\367\377\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\036\000\000\000\000\000\000\000\001\000\000\000\000\000\000"
        mounted = 5
        timeout = 300
        st = {st_dev = 52, st_ino = 8723280, st_nlink = 3, st_mode = 16877, st_uid = 0, st_gid = 0, __pad0 = 0, st_rdev = 0, st_size = 0, st_blksize = 1024, st_blocks = 0, st_atim = {tv_sec = 1461589310, tv_nsec = 895155725},
          st_mtim = {tv_sec = 1461589227, tv_nsec = 963863483}, st_ctim = {tv_sec = 1461341582, tv_nsec = 200606897}, __glibc_reserved = {0, 0, 0}}
        fd = 24
        __FUNCTION__ = "remount_active_mount"
#22 0x0000555555577403 in try_remount (ap=ap@entry=0x5555557fc810, me=me@entry=0x0, type=type@entry=1) at mounts.c:1857
        ops = <optimized out>
        path = 0x5555557fc910 "/misc"
        ret = <optimized out>
        fd = 24
        devid = 52
#23 0x0000555555564207 in do_mount_autofs_indirect (root=0x7fffe00008c0 "/misc", ap=0x5555557fc810) at indirect.c:104
        str_indirect = 0x55555558a8ad "indirect"
        timeout = 300
        mnts = <optimized out>
        ret = <optimized out>
        err = <optimized out>
        ops = 0x55555579ce00 <dev_ioctl_ops>
        options = 0x0
        st = {st_dev = 93824992454368, st_ino = 140736951486688, st_nlink = 140737343522240, st_mode = 21, st_uid = 0, st_gid = 0, __pad0 = 0, st_rdev = 0, st_size = 472446402651, st_blksize = 0, st_blocks = 0, st_atim = {
            tv_sec = 532575944823, tv_nsec = 472446402651}, st_mtim = {tv_sec = 140736951484448, tv_nsec = 22}, st_ctim = {tv_sec = 140737349742974, tv_nsec = 93824992453750}, __glibc_reserved = {0, 22, 140733193388048}}
        hosts_map_name = 0x55555558a7ba "-hosts"
        map_name = 0x55555558a7ba "-hosts"
        type = <optimized out>
#24 mount_autofs_indirect (ap=0x5555557fc810, root=0x7fffe00008c0 "/misc") at indirect.c:216
        map = <optimized out>
        __FUNCTION__ = "mount_autofs_indirect"
#25 0x0000555555561d05 in mount_autofs (root=0x7fffe00008c0 "/misc", ap=0x5555557fc810) at automount.c:1105
        status = 0
#26 handle_mounts (arg=0x7fffffffd480) at automount.c:1674
        __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {0, 4948842126636994008, 0, 140737488343951, 93824995018768, 140737152808704, -4948886106441527848, -1294931001197474344}, __mask_was_saved = 0}}, __pad = {0x7fffebffef70,
            0x0, 0x0, 0x0}}
        __cancel_routine = 0x55555555f807 <return_start_status>
        __cancel_arg = 0x7fffffffd480
        __not_first_call = <optimized out>
        suc = 0x7fffffffd480
        ap = 0x5555557fc810
        cancel_state = 0
        status = <optimized out>
        root = 0x7fffe00008c0 "/misc"
        __FUNCTION__ = "handle_mounts"
#27 0x00007ffff7bc6494 in start_thread (arg=0x7fffebfff700) at pthread_create.c:334
        __res = <optimized out>
        pd = 0x7fffebfff700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140737152808704, 4948842126636994008, 0, 140737488343951, 93824995018768, 140737152808704, -4948886106546385448, -4948824005787922984}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0,
              0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
        __PRETTY_FUNCTION__ = "start_thread"
#28 0x00007ffff732eedd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

I'm far from a gdb expert but setting a breakpoint in autofs seems to suggest that in the parent process 0x7ffff3df5440 is the address for SSL_str_functs from ssl/ssl_err.c in OpenSSL.  After the crash x 0x7ffff3df5440 reports the memory is inaccessible and the address for SSL_str_functs has changed:

print &SSL_str_functs
$3 = (ERR_STRING_DATA (*)[235]) 0x7ffff35f4440 <SSL_str_functs>

So the memory has been moved from 0x7ffff3df5440 to 0x7ffff35f5440 - a shift of 0x800000, 8Mb.

Compiling OpenSSL with -DOPENSSL_NO_ERR solves this issue as it causes all the error string code to be omitted.  I don't know if the OpenSSL assumption that the address of the string won't change is valid or if that is a sound assumption why it changes between threads.

autofs_ldap_auth.conf:
<autofs_ldap_sasl_conf
        usetls="yes"
        tlsrequired="no"
        authrequired="yes"
        authtype="GSSAPI"
        clientprinc="nslcd@MY.AD.DOMAIN"
        credentialcache="/tmp/nslcd.tkt"
/>
(nslcd.tkt managed by k5start using a keytab for the nslcd account)

The LDAP server has a valid SSL configuration and ldap and ldaps searches from the gentoo machine work successfully.

Reproducible: Always

Steps to Reproduce:
1. Have an LDAP server containing auto.master and maps
2. Install the Gentoo packages mentioned in the description including the patched cyrus-sasl.
3. Configure autofs to use GSSAPI authentication to the ldap server
4. Run automount -m to verify the maps can be retrieved
5. Start autofs as a daemon, try to access a directory managed by autofs, autofs crashes
Actual Results:  
autofs exits with segmentation fault

Expected Results:  
autofs mounts the requested directory
Comment 1 Spooky Ghost 2016-04-25 15:11:24 UTC
# emerge --info
Portage 2.2.26 (python 2.7.10-final-0, default/linux/amd64/13.0/no-multilib, gcc-4.9.3, glibc-2.22-r4, 4.1.21 x86_64)
=================================================================
System uname: Linux-4.1.21-x86_64-Six-Core_AMD_Opteron-tm-_Processor_2423_HE-with-gentoo-2.2
KiB Mem:      470816 total,     86916 free
KiB Swap:    2097148 total,   2039592 free
Timestamp of repository gentoo: Sun, 24 Apr 2016 16:24:31 +0000
sh bash 4.3_p42-r1
ld GNU ld (Gentoo 2.25.1 p1.1) 2.25.1
ccache version 3.2.4 [enabled]
app-shells/bash:          4.3_p42-r1::gentoo
dev-java/java-config:     2.2.0-r3::gentoo
dev-lang/perl:            5.20.2::gentoo
dev-lang/python:          2.7.10-r1::gentoo, 3.4.3-r1::gentoo
dev-util/ccache:          3.2.4::gentoo
dev-util/cmake:           3.3.1-r1::gentoo
dev-util/pkgconfig:       0.28-r2::gentoo
sys-apps/baselayout:      2.2::gentoo
sys-apps/openrc:          0.19.1::gentoo
sys-apps/sandbox:         2.10-r1::gentoo
sys-devel/autoconf:       2.13::<unknown repository>, 2.69::gentoo
sys-devel/automake:       1.9.6-r3::gentoo, 1.10.3::gentoo, 1.11.6-r1::gentoo, 1.12.6::gentoo, 1.13.4::gentoo, 1.14.1::gentoo, 1.15::gentoo
sys-devel/binutils:       2.25.1-r1::gentoo
sys-devel/gcc:            4.9.3::gentoo
sys-devel/gcc-config:     1.7.3::gentoo
sys-devel/libtool:        2.4.6::gentoo
sys-devel/make:           4.1-r1::gentoo
sys-kernel/linux-headers: 4.3::gentoo (virtual/os-headers)
sys-libs/glibc:           2.22-r4::gentoo
Repositories:

gentoo
    location: /usr/portage
    sync-type: rsync
    sync-uri: rsync://portage.my.domain/gentoo-portage
    priority: -1000
    sync-rsync-extra-opts: --progress --stats
    sync-rsync-vcs-ignore: true

dmuk
    location: /usr/local/portage
    sync-type: git
    sync-uri: git://portage.my.domain/portage.git
    masters: gentoo
    priority: 100

squeezebox
    location: /var/lib/layman/squeezebox
    sync-type: git
    sync-uri: https://github.com/hickinbottoms/gentoo-squeezebox-overlay.git
    masters: gentoo
    priority: 100

ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="* -@EULA"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=amdfam10 -O1 -pipe -ggdb"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/gnupg/qualified.txt /usr/share/polkit-1/actions /var/lib/hsqldb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.6/ext-active/ /etc/php/cgi-php5.6/ext-active/ /etc/php/cli-php5.6/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-march=amdfam10 -O3 -pipe"
DISTDIR="/misc/distfiles"
EMERGE_DEFAULT_OPTS="--with-bdeps y"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs ccache distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr nostrip noclean"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://www.mirrorservice.org/sites/distfiles.gentoo.org http://gentoo.osuosl.org http://www.ibiblio.org/pub/Linux/distributions/gentoo"
LANG="en_GB.utf8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_EXTRA_OPTS="--progress --stats"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
USE="3dnow 3dnowext X Xaw3d aac aalib acl acpi aim alsa amd64 apache2 audiofile avi bash-completion berkdb bluetooth bmp bonobo bzip2 caps cdb cdr cjk cli consolekit cpdflib cracklib crypt cups curl cxx dba dbm dbus dga directfb divx4linux dri dts dvb dvd dvdr encode esd exif expat fam fbcon fftw flac flash foomaticdb fortran ftp gd gdbm gif gnome gphoto2 gpm gstreamer gtk gtk2 gtkhtml iconv icq imagemagick imap imlib innodb inotify ipv6 irmc jabber jadetex java jbig joystick jpeg jpeg2k kde kerberos lcms ldap libav libedit libwww lirc lm_sensors mad maildir mailwrapper mhash mime ming mmx mmxext mng modules mp3 mpeg msn mysql ncurses nls nptl nptlonly offensive ogg openal opengl openmp oscar pam pcre pdf pdflib perl php png policykit popcnt postgres ppds pulseaudio python qt4 qt5 quicktime readline samba sasl sdl seamonkey seccomp semantic-desktop session slp snmp spell sse sse2 sse3 sse4a ssl svg tcl tcltk tcpd tetex theora tiff tk truetype udev unicode usb v4l2 videos vorbis wmf xattr xine xinerama xml xml2 xmp xpm xsl xv xvid yahoo zlib" ABI_X86="64" ALSA_CARDS="emu10k1 intel8x0" APACHE2_MODULES="actions alias auth_basic auth_digest authn_anon authn_core authn_dbd authn_dbm authn_default authn_file authz_core authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi dav dav_fs dav_lock dbd deflate dir disk_cache env expires ext_filter file_cache filter headers ident imagemap include info log_config logio macro mem_cache mime mime_magic negotiation proxy proxy_ajp proxy_balancer proxy_connect proxy_http remoteip rewrite setenvif slotmem_shm so socache_shmcb speling status unique_id unixd userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="canon" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="3dnow 3dnowext mmx mmxext popcnt sse sse2 sse3 sse4a" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="evdev keyboard joystick mouse vmmouse" KERNEL="linux" LCD_DEVICES="mtxorb xosd text ncurses" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="en en_GB cs de fr hu it ja pt" LIRC_DEVICES="hauppauge" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-6" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_4" RUBY_TARGETS="ruby20 ruby21" USERLAND="GNU" VIDEO_CARDS="fbdev vesa vga intel nv nvidia r128 radeon vmware v4l i915" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CC, CPPFLAGS, CTARGET, CXX, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, USE_PYTHON
Comment 2 razamatan 2016-06-18 08:56:11 UTC
getting the same issue using nearly the same setup except for mit-krb5 instead of heimdal:

[IP-] [  ] net-fs/autofs-5.1.1-r1:0
[IP-] [  ] net-nds/openldap-2.4.38-r2:0
[IP-] [  ] dev-libs/openssl-1.0.2h:0
[IP-] [  ] dev-libs/cyrus-sasl-2.1.26-r9:2
[IP-] [  ] app-crypt/mit-krb5-1.14.2:0

also, my cyrus-sasl has no additional patches, it's use flags are:
# equery u cyrus-sasl                                                                
[ Legend : U - final flag setting for installation]
[        : I - package is installed with flag     ]
[ Colors : set, unset                             ]
 * Found these USE flags for dev-libs/cyrus-sasl-2.1.26-r9:
 U I
 - - abi_x86_32  : 32-bit (x86) libraries
 - - authdaemond : Add Courier-IMAP authdaemond unix socket support (net-mail/courier-imap,
                   mail-mta/courier) 
 + + berkdb      : Add support for sys-libs/db (Berkeley DB for MySQL)
 + + gdbm        : Add support for sys-libs/gdbm (GNU database libraries)
 - - java        : Add support for Java
 + + kerberos    : Add kerberos support
 - - ldapdb      : Enable ldapdb plugin
 - - mysql       : Add mySQL Database support
 + + openldap    : Add ldap support for saslauthd
 + + pam         : Add support for PAM (Pluggable Authentication Modules) - DANGEROUS to
                   arbitrarily flip
 - - postgres    : Add support for the postgresql database
 - - sample      : Enable sample client and server
 - - sqlite      : Add support for sqlite - embedded sql database
 - - srp         : Enable SRP authentication
 + + ssl         : Add support for Secure Socket Layer connections
 - - static-libs : Build static versions of dynamic libraries as well
 + + urandom     : Use /dev/urandom instead of /dev/random

# emerge --info
Portage 2.2.28 (python 3.4.3-final-0, hardened/linux/amd64, gcc-4.9.3, glibc-2.22-r4, 4.4.8-hardened-r1 x86_64)
=================================================================
System uname: Linux-4.4.8-hardened-r1-x86_64-Intel-R-_Core-TM-_i7-3770_CPU_@_3.40GHz-with-gentoo-2.2
KiB Mem:    32662184 total,  32242004 free
KiB Swap:     575484 total,    575484 free
Timestamp of repository gentoo: Sat, 18 Jun 2016 06:30:01 +0000
sh bash 4.3_p42-r1
ld GNU ld (Gentoo 2.25.1 p1.1) 2.25.1
app-shells/bash:          4.3_p42-r1::gentoo
dev-lang/perl:            5.20.2::gentoo
dev-lang/python:          2.7.10-r1::gentoo, 3.4.3-r1::gentoo
dev-util/cmake:           3.3.1-r1::gentoo
dev-util/pkgconfig:       0.28-r2::gentoo
sys-apps/baselayout:      2.2::gentoo
sys-apps/openrc:          0.19.1::gentoo
sys-apps/sandbox:         2.10-r1::gentoo
sys-devel/autoconf:       2.13::gentoo, 2.69::gentoo
sys-devel/automake:       1.11.6-r1::gentoo, 1.13.4::gentoo, 1.14.1::gentoo, 1.15::gentoo
sys-devel/binutils:       2.25.1-r1::gentoo
sys-devel/gcc:            4.9.3::gentoo
sys-devel/gcc-config:     1.7.3::gentoo
sys-devel/libtool:        2.4.6::gentoo
sys-devel/make:           4.1-r1::gentoo
sys-kernel/linux-headers: 4.3::gentoo (virtual/os-headers)
sys-libs/glibc:           2.22-r4::gentoo
Repositories:

gentoo
    location: /var/portage
    sync-type: rsync
    sync-uri: rsync://rsync.gentoo.org/gentoo-portage
    priority: -1000
    sync-rsync-extra-opts: --exclude-from=/etc/portage/rsync.exclude

razamatan
    location: /usr/local/portage
    masters: gentoo
    priority: 0

ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="* -@EULA"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -march=native -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /lib64/rc/sh /usr/share/gnupg/qualified.txt /usr/share/vte/termcap-0.0/xterm"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-O2 -march=native -pipe"
DISTDIR="/usr/portage/distfiles"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://gentoo.osuosl.org http://gentoo.oregonstate.edu http://ftp.ucsb.edu/pub/mirrors/linux/gentoo http://www.ibiblio.org/pub/Linux/distributions/gentoo"
LANG="en_US.utf8"
LC_ALL="en_US.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j6"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_EXTRA_OPTS="--exclude-from=/etc/portage/rsync.exclude"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
USE="256-color X aac aacplus acl acpi aes alsa amd64 ao audiofile avahi avx bash-completion bazaar berkdb boost bzip2 cairo caps cli consolekit cracklib crypt cscope css ctype cxx dbus dri drm dts encode exif faac fat fbcon ffmpeg fftw flac fontconfig gallium gdbm gif git gmp gnome-keyring gnutls gssapi gudev hardened hwdb iconv icu id3tag idn imagemagick imap inotify ipv6 jpeg jpeg2k justify kerberos keymap lame ldap libnotify lm_sensors logrotate mad matroska mbox md5sum mime mms mmx mmxext modules mp3 mp4 mpd mpeg mpeg2 mplayer multilib musepack ncurses netboot network nfs nfsidmap nfsv4 nls nptl offensive ogg ogm opengl openldap openmp openssl pam pax_kernel pcre pdf perl pie png policykit popcnt posix pulseaudio python readline samba sasl screen sdl seccomp session sftp smp sockets sse sse2 sse3 sse4_1 sse4_2 ssl ssp ssse3 svg syslog taglib tcpd threads tiff tls truetype udev unicode urandom userlocales utf8 vaapi vcd vim-syntax vorbis wav wma x264 xattr xcb xft xine xinerama xml xtpax xvid xvmc zeroconf zip zlib" ABI_X86="64" ALSA_CARDS="hda-intel" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="en en_US ko" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_4" QEMU_SOFTMMU_TARGETS="x86_64" QEMU_USER_TARGETS="x86_64" RUBY_TARGETS="ruby20 ruby21" USERLAND="GNU" VIDEO_CARDS="intel vesa" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset:  CC, CPPFLAGS, CTARGET, CXX, EMERGE_DEFAULT_OPTS, INSTALL_MASK, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, USE_PYTHON
Comment 3 razamatan 2016-06-18 09:04:07 UTC
i've downgraded autofs to 5.0.7-r4 and things are peachy again.
Comment 4 Joakim Tjernlund 2016-06-18 16:24:46 UTC
(In reply to razamatan from comment #3)
> i've downgraded autofs to 5.0.7-r4 and things are peachy again.

Same here, got mit-kerberos as well
Comment 5 Joakim Tjernlund 2016-06-18 16:43:26 UTC
Actually bug https://bugs.gentoo.org/show_bug.cgi?id=578742
has a "workaround" that works for me
Comment 6 razamatan 2016-06-20 22:10:10 UTC
unmasking and version bumping to 5.1.2 w/o any config changes works for me.
Comment 7 Matt Turner gentoo-dev 2019-08-12 21:24:55 UTC
Can you reproduce with current versions? 5.1.2? 5.1.5?