LDAP server: samba AD DC from Ubuntu Xenial 2:4.3.8+dfsg-0ubuntu1 Gentoo: for x in net-fs/autofs net-nds/openldap dev-libs/openssl dev-libs/cyrus-sasl app-crypt/heimdal ; do equery l ${x} ; done * Searching for autofs in net-fs ... [IP-] [ ] net-fs/autofs-5.1.1-r1:0 * Searching for openldap in net-nds ... [IP-] [ ] net-nds/openldap-2.4.38-r2:0 * Searching for openssl in dev-libs ... [IP-] [ ] dev-libs/openssl-1.0.2g-r2:0 * Searching for cyrus-sasl in dev-libs ... [I-O] [ ] dev-libs/cyrus-sasl-2.1.26-r9:2 * Searching for heimdal in app-crypt ... [IP-] [ ] app-crypt/heimdal-1.5.3-r2:0 I am using an additional patch for cyrus-sasl which I believe is related to #409897 and also https://bugzilla.novell.com/show_bug.cgi?id=775279 which solves a GSSAPI authentication problem. My auto.master and other maps are all stored in the LDAP directory. The maps are successfully reported with automount -m suggesting no issue with the configuration. Running autofs as a daemon crashes when trying to mount an automounted directory. gdb bt full shows the segmentation fault comes from OpenSSL libcrypto.so.1.0.0: (gdb) bt full #0 err_string_data_LHASH_COMP (arg1=0x7ffff3df5440, arg2=0x7fffebff91e0) at err.c:354 a = 0x7ffff3df5440 b = 0x7fffebff91e0 #1 0x00007ffff5caede0 in getrn (lh=lh@entry=0x5555557b0240, data=data@entry=0x7fffebff91e0, rhash=rhash@entry=0x7fffebff91a0) at lhash.c:427 ret = 0x7ffff7f55960 n1 = 0x5555557d1680 hash = 336900394 nn = <optimized out> cf = 0x7ffff5cb100a <err_string_data_LHASH_COMP> #2 0x00007ffff5caf34f in lh_retrieve (lh=lh@entry=0x5555557b0240, data=data@entry=0x7fffebff91e0) at lhash.c:254 hash = 336900394 rn = <optimized out> ret = <optimized out> #3 0x00007ffff5cb1535 in int_err_get_item (d=0x7fffebff91e0) at err.c:394 p = <optimized out> hash = 0x5555557b0240 #4 0x00007ffff5cb1a63 in ERR_func_error_string (e=<optimized out>) at err.c:974 d = {error = 336900096, string = 0xaa0798b0e00a8400 <error: Cannot access memory at address 0xaa0798b0e00a8400>} p = <optimized out> l = <optimized out> f = <optimized out> #5 0x00007ffff33d9640 in ERR_load_SSL_strings () at ssl_err.c:832 No locals. #6 0x00007ffff33cc70a in SSL_load_error_strings () at ssl_err2.c:67 No locals. #7 0x00007ffff3a5a8c9 in tlso_init () at /var/tmp/portage/net-nds/openldap-2.4.38-r2/work/openldap-2.4.38/libraries/libldap/tls_o.c:160 No locals. #8 0x00007ffff3a58a4e in ldap_int_tls_start (ld=ld@entry=0x7fffe000c750, conn=0x7fffe0000cb0, srv=srv@entry=0x0) at /var/tmp/portage/net-nds/openldap-2.4.38-r2/work/openldap-2.4.38/libraries/libldap/tls2.c:838 sb = 0x7fffe000c6f0 host = 0x7fffe000c690 "samba4dc0.ad.dingwall.me.uk" ssl = <optimized out> ret = <optimized out> __PRETTY_FUNCTION__ = "ldap_int_tls_start" #9 0x00007ffff3a58c62 in ldap_start_tls_s (ld=0x7fffe000c750, serverctrls=serverctrls@entry=0x0, clientctrls=clientctrls@entry=0x0) at /var/tmp/portage/net-nds/openldap-2.4.38-r2/work/openldap-2.4.38/libraries/libldap/tls2.c:1040 rc = 0 rspoid = 0x7fffe00023b0 "" rspdata = 0x0 #10 0x00007ffff3c7e8e0 in init_ldap_connection (logopt=logopt@entry=1, uri=uri@entry=0x7fffe0000aa0 "ldap://samba4dc0.ad.dingwall.me.uk/", ctxt=ctxt@entry=0x7fffe0000980) at lookup_ldap.c:313 ldap = <optimized out> timeout = {tv_sec = 4294967295, tv_usec = 0} net_timeout = {tv_sec = 8, tv_usec = 0} rv = <optimized out> __FUNCTION__ = "init_ldap_connection" #11 0x00007ffff3c7e9f6 in do_connect (logopt=logopt@entry=1, conn=conn@entry=0x7fffebff9500, uri=0x7fffe0000aa0 "ldap://samba4dc0.ad.dingwall.me.uk/", ctxt=ctxt@entry=0x7fffe0000980) at lookup_ldap.c:645 cur_host = 0x0 ret = 0 __FUNCTION__ = "do_connect" #12 0x00007ffff3c7f31e in do_reconnect (logopt=1, conn=conn@entry=0x7fffebff9500, ctxt=ctxt@entry=0x7fffe0000980) at lookup_ldap.c:969 ret = 2 dcrv = 0 rv = 0 __FUNCTION__ = "do_reconnect" #13 0x00007ffff3c82c5a in lookup_one (ctxt=0x7fffe0000980, qKey_len=9, qKey=0x7fffe0000be0 "distfiles", source=0x5555557fc1e0, ap=0x5555557fc810) at lookup_ldap.c:2983 conn = {ldap = 0x0, sasl_conn = 0x0} rv = <optimized out> buf = '\000' <repeats 127 times> enc_len2 = 0 we = <optimized out> query = <optimized out> entry = <optimized out> i = <optimized out> bvKey = <optimized out> class = <optimized out> enc_key1 = 0x0 attrs = {0x0, 0x0, 0x0} scope = 2 mc = 0x5555557fca70 count = <optimized out> e = <optimized out> info = <optimized out> enc_key2 = 0x0 bvValues = <optimized out> wild = 0 ret = 8 ldap = <optimized out> l = <optimized out> ql = <optimized out> result = 0x0 enc_len1 = 0 #14 match_key (ctxt=0x7fffe0000980, key_len=9, key=0x7fffe0000be0 "distfiles", source=0x5555557fc1e0, ap=0x5555557fc810) at lookup_ldap.c:3482 is_amd_format = <optimized out> buf = '\000' <repeats 127 times> lkp_key = <optimized out> prefix = <optimized out> ret = <optimized out> #15 check_map_indirect (ctxt=0x7fffe0000980, key_len=9, key=0x7fffe0000be0 "distfiles", source=0x5555557fc1e0, ap=0x5555557fc810) at lookup_ldap.c:3569 is_amd_format = 0 mc = 0x5555557fca70 me = <optimized out> ret = <optimized out> status = <optimized out> t_last_read = <optimized out> cur_state = 1 #16 lookup_mount (ap=0x5555557fc810, name=<optimized out>, name_len=<optimized out>, context=0x7fffe0000980) at lookup_ldap.c:3722 ctxt = 0x7fffe0000980 source = 0x5555557fc1e0 mc = 0x5555557fca70 me = <optimized out> key = "distfiles", '\000' <repeats 246 times> key_len = 9 lkp_key = <optimized out> mapent = 0x0 mapent_buf = '\000' <repeats 232 times>... buf = '\000' <repeats 127 times> status = 0 ret = 1 __FUNCTION__ = "lookup_mount" #17 0x000055555556d54a in do_lookup_mount (ap=ap@entry=0x5555557fc810, map=map@entry=0x5555557fc1e0, name=name@entry=0x7fffe0000b93 "distfiles", name_len=name_len@entry=9) at lookup.c:766 lookup = 0x7fffe0000900 status = <optimized out> __FUNCTION__ = "do_lookup_mount" #18 0x000055555556e1a4 in do_name_lookup_mount (name_len=9, name=0x7fffe0000b93 "distfiles", map=0x5555557fc1e0, ap=0x5555557fc810) at lookup.c:926 path = <optimized out> #19 lookup_nss_mount (ap=ap@entry=0x5555557fc810, source=source@entry=0x0, name=0x7fffe0000b93 "distfiles", name_len=9) at lookup.c:1102 __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {2, -1294930843580510760, 2, 140737152800944, 93824995018768, 93824994627072, -4948886108412850728, -1294931005789450792}, __mask_was_saved = 0}}, __pad = {0x7fffebffec70, 0x0, 0x0, 0x6e0000005b}} __cancel_arg = 0x5555557fc700 __not_first_call = <optimized out> entry = 0x5555557fc700 nsslist = {next = 0x8030, prev = 0x3} head = <optimized out> p = <optimized out> this = <optimized out> map = 0x5555557fc1e0 status = <optimized out> result = 0 __FUNCTION__ = "lookup_nss_mount" #20 0x0000555555576d5c in do_remount_indirect (ap=ap@entry=0x5555557fc810, fd=24, path=path@entry=0x5555557fc910 "/misc") at mounts.c:1725 ret = <optimized out> len = <optimized out> ops = 0x55555579ce00 <dev_ioctl_ops> status = 0 de = 0x7fffe000c370 buf = "/misc/distfiles", '\000' <repeats 33 times>, "/usr/lib64/autofs/lookup_ldap.so", '\000' <repeats 1880 times>... uid = 4294967295 gid = 4294967295 mounted = 5 n = 2 #21 0x0000555555577218 in remount_active_mount (ap=ap@entry=0x5555557fc810, me=me@entry=0x0, path=path@entry=0x5555557fc910 "/misc", devid=<optimized out>, type=type@entry=1, ioctlfd=ioctlfd@entry=0x7fffebffea9c) at mounts.c:1831 ops = 0x55555579ce00 <dev_ioctl_ops> str_type = 0x55555558a8ad "indirect" buf = "P\352\377\353\377\177\000\000\020\310\177UUU\000\000\213\200\017\000\000\000\000\000p\312\177UUU\000\000\213\200\017\000\000\000\000\000 \000\000\340\377\177\000\000\036", '\000' <repeats 11 times>, "UU\000\000\377\377\377\377\000\000\000\000\005\000\000\000\000\000\000\000\000\316yUUU\000\000\270\t,\367\377\177\000\000\000\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\036\000\000\000\000\000\000\000\001\000\000\000\000\000\000" mounted = 5 timeout = 300 st = {st_dev = 52, st_ino = 8723280, st_nlink = 3, st_mode = 16877, st_uid = 0, st_gid = 0, __pad0 = 0, st_rdev = 0, st_size = 0, st_blksize = 1024, st_blocks = 0, st_atim = {tv_sec = 1461589310, tv_nsec = 895155725}, st_mtim = {tv_sec = 1461589227, tv_nsec = 963863483}, st_ctim = {tv_sec = 1461341582, tv_nsec = 200606897}, __glibc_reserved = {0, 0, 0}} fd = 24 __FUNCTION__ = "remount_active_mount" #22 0x0000555555577403 in try_remount (ap=ap@entry=0x5555557fc810, me=me@entry=0x0, type=type@entry=1) at mounts.c:1857 ops = <optimized out> path = 0x5555557fc910 "/misc" ret = <optimized out> fd = 24 devid = 52 #23 0x0000555555564207 in do_mount_autofs_indirect (root=0x7fffe00008c0 "/misc", ap=0x5555557fc810) at indirect.c:104 str_indirect = 0x55555558a8ad "indirect" timeout = 300 mnts = <optimized out> ret = <optimized out> err = <optimized out> ops = 0x55555579ce00 <dev_ioctl_ops> options = 0x0 st = {st_dev = 93824992454368, st_ino = 140736951486688, st_nlink = 140737343522240, st_mode = 21, st_uid = 0, st_gid = 0, __pad0 = 0, st_rdev = 0, st_size = 472446402651, st_blksize = 0, st_blocks = 0, st_atim = { tv_sec = 532575944823, tv_nsec = 472446402651}, st_mtim = {tv_sec = 140736951484448, tv_nsec = 22}, st_ctim = {tv_sec = 140737349742974, tv_nsec = 93824992453750}, __glibc_reserved = {0, 22, 140733193388048}} hosts_map_name = 0x55555558a7ba "-hosts" map_name = 0x55555558a7ba "-hosts" type = <optimized out> #24 mount_autofs_indirect (ap=0x5555557fc810, root=0x7fffe00008c0 "/misc") at indirect.c:216 map = <optimized out> __FUNCTION__ = "mount_autofs_indirect" #25 0x0000555555561d05 in mount_autofs (root=0x7fffe00008c0 "/misc", ap=0x5555557fc810) at automount.c:1105 status = 0 #26 handle_mounts (arg=0x7fffffffd480) at automount.c:1674 __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {0, 4948842126636994008, 0, 140737488343951, 93824995018768, 140737152808704, -4948886106441527848, -1294931001197474344}, __mask_was_saved = 0}}, __pad = {0x7fffebffef70, 0x0, 0x0, 0x0}} __cancel_routine = 0x55555555f807 <return_start_status> __cancel_arg = 0x7fffffffd480 __not_first_call = <optimized out> suc = 0x7fffffffd480 ap = 0x5555557fc810 cancel_state = 0 status = <optimized out> root = 0x7fffe00008c0 "/misc" __FUNCTION__ = "handle_mounts" #27 0x00007ffff7bc6494 in start_thread (arg=0x7fffebfff700) at pthread_create.c:334 __res = <optimized out> pd = 0x7fffebfff700 now = <optimized out> unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140737152808704, 4948842126636994008, 0, 140737488343951, 93824995018768, 140737152808704, -4948886106546385448, -4948824005787922984}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = <optimized out> pagesize_m1 = <optimized out> sp = <optimized out> freesize = <optimized out> __PRETTY_FUNCTION__ = "start_thread" #28 0x00007ffff732eedd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109 I'm far from a gdb expert but setting a breakpoint in autofs seems to suggest that in the parent process 0x7ffff3df5440 is the address for SSL_str_functs from ssl/ssl_err.c in OpenSSL. After the crash x 0x7ffff3df5440 reports the memory is inaccessible and the address for SSL_str_functs has changed: print &SSL_str_functs $3 = (ERR_STRING_DATA (*)[235]) 0x7ffff35f4440 <SSL_str_functs> So the memory has been moved from 0x7ffff3df5440 to 0x7ffff35f5440 - a shift of 0x800000, 8Mb. Compiling OpenSSL with -DOPENSSL_NO_ERR solves this issue as it causes all the error string code to be omitted. I don't know if the OpenSSL assumption that the address of the string won't change is valid or if that is a sound assumption why it changes between threads. autofs_ldap_auth.conf: <autofs_ldap_sasl_conf usetls="yes" tlsrequired="no" authrequired="yes" authtype="GSSAPI" clientprinc="nslcd@MY.AD.DOMAIN" credentialcache="/tmp/nslcd.tkt" /> (nslcd.tkt managed by k5start using a keytab for the nslcd account) The LDAP server has a valid SSL configuration and ldap and ldaps searches from the gentoo machine work successfully. Reproducible: Always Steps to Reproduce: 1. Have an LDAP server containing auto.master and maps 2. Install the Gentoo packages mentioned in the description including the patched cyrus-sasl. 3. Configure autofs to use GSSAPI authentication to the ldap server 4. Run automount -m to verify the maps can be retrieved 5. Start autofs as a daemon, try to access a directory managed by autofs, autofs crashes Actual Results: autofs exits with segmentation fault Expected Results: autofs mounts the requested directory
# emerge --info Portage 2.2.26 (python 2.7.10-final-0, default/linux/amd64/13.0/no-multilib, gcc-4.9.3, glibc-2.22-r4, 4.1.21 x86_64) ================================================================= System uname: Linux-4.1.21-x86_64-Six-Core_AMD_Opteron-tm-_Processor_2423_HE-with-gentoo-2.2 KiB Mem: 470816 total, 86916 free KiB Swap: 2097148 total, 2039592 free Timestamp of repository gentoo: Sun, 24 Apr 2016 16:24:31 +0000 sh bash 4.3_p42-r1 ld GNU ld (Gentoo 2.25.1 p1.1) 2.25.1 ccache version 3.2.4 [enabled] app-shells/bash: 4.3_p42-r1::gentoo dev-java/java-config: 2.2.0-r3::gentoo dev-lang/perl: 5.20.2::gentoo dev-lang/python: 2.7.10-r1::gentoo, 3.4.3-r1::gentoo dev-util/ccache: 3.2.4::gentoo dev-util/cmake: 3.3.1-r1::gentoo dev-util/pkgconfig: 0.28-r2::gentoo sys-apps/baselayout: 2.2::gentoo sys-apps/openrc: 0.19.1::gentoo sys-apps/sandbox: 2.10-r1::gentoo sys-devel/autoconf: 2.13::<unknown repository>, 2.69::gentoo sys-devel/automake: 1.9.6-r3::gentoo, 1.10.3::gentoo, 1.11.6-r1::gentoo, 1.12.6::gentoo, 1.13.4::gentoo, 1.14.1::gentoo, 1.15::gentoo sys-devel/binutils: 2.25.1-r1::gentoo sys-devel/gcc: 4.9.3::gentoo sys-devel/gcc-config: 1.7.3::gentoo sys-devel/libtool: 2.4.6::gentoo sys-devel/make: 4.1-r1::gentoo sys-kernel/linux-headers: 4.3::gentoo (virtual/os-headers) sys-libs/glibc: 2.22-r4::gentoo Repositories: gentoo location: /usr/portage sync-type: rsync sync-uri: rsync://portage.my.domain/gentoo-portage priority: -1000 sync-rsync-extra-opts: --progress --stats sync-rsync-vcs-ignore: true dmuk location: /usr/local/portage sync-type: git sync-uri: git://portage.my.domain/portage.git masters: gentoo priority: 100 squeezebox location: /var/lib/layman/squeezebox sync-type: git sync-uri: https://github.com/hickinbottoms/gentoo-squeezebox-overlay.git masters: gentoo priority: 100 ACCEPT_KEYWORDS="amd64" ACCEPT_LICENSE="* -@EULA" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=amdfam10 -O1 -pipe -ggdb" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/gnupg/qualified.txt /usr/share/polkit-1/actions /var/lib/hsqldb" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.6/ext-active/ /etc/php/cgi-php5.6/ext-active/ /etc/php/cli-php5.6/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-march=amdfam10 -O3 -pipe" DISTDIR="/misc/distfiles" EMERGE_DEFAULT_OPTS="--with-bdeps y" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-logs ccache distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr nostrip noclean" FFLAGS="-O2 -pipe" GENTOO_MIRRORS="http://www.mirrorservice.org/sites/distfiles.gentoo.org http://gentoo.osuosl.org http://www.ibiblio.org/pub/Linux/distributions/gentoo" LANG="en_GB.utf8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_EXTRA_OPTS="--progress --stats" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" USE="3dnow 3dnowext X Xaw3d aac aalib acl acpi aim alsa amd64 apache2 audiofile avi bash-completion berkdb bluetooth bmp bonobo bzip2 caps cdb cdr cjk cli consolekit cpdflib cracklib crypt cups curl cxx dba dbm dbus dga directfb divx4linux dri dts dvb dvd dvdr encode esd exif expat fam fbcon fftw flac flash foomaticdb fortran ftp gd gdbm gif gnome gphoto2 gpm gstreamer gtk gtk2 gtkhtml iconv icq imagemagick imap imlib innodb inotify ipv6 irmc jabber jadetex java jbig joystick jpeg jpeg2k kde kerberos lcms ldap libav libedit libwww lirc lm_sensors mad maildir mailwrapper mhash mime ming mmx mmxext mng modules mp3 mpeg msn mysql ncurses nls nptl nptlonly offensive ogg openal opengl openmp oscar pam pcre pdf pdflib perl php png policykit popcnt postgres ppds pulseaudio python qt4 qt5 quicktime readline samba sasl sdl seamonkey seccomp semantic-desktop session slp snmp spell sse sse2 sse3 sse4a ssl svg tcl tcltk tcpd tetex theora tiff tk truetype udev unicode usb v4l2 videos vorbis wmf xattr xine xinerama xml xml2 xmp xpm xsl xv xvid yahoo zlib" ABI_X86="64" ALSA_CARDS="emu10k1 intel8x0" APACHE2_MODULES="actions alias auth_basic auth_digest authn_anon authn_core authn_dbd authn_dbm authn_default authn_file authz_core authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi dav dav_fs dav_lock dbd deflate dir disk_cache env expires ext_filter file_cache filter headers ident imagemap include info log_config logio macro mem_cache mime mime_magic negotiation proxy proxy_ajp proxy_balancer proxy_connect proxy_http remoteip rewrite setenvif slotmem_shm so socache_shmcb speling status unique_id unixd userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="canon" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="3dnow 3dnowext mmx mmxext popcnt sse sse2 sse3 sse4a" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="evdev keyboard joystick mouse vmmouse" KERNEL="linux" LCD_DEVICES="mtxorb xosd text ncurses" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="en en_GB cs de fr hu it ja pt" LIRC_DEVICES="hauppauge" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-6" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_4" RUBY_TARGETS="ruby20 ruby21" USERLAND="GNU" VIDEO_CARDS="fbdev vesa vga intel nv nvidia r128 radeon vmware v4l i915" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CC, CPPFLAGS, CTARGET, CXX, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, USE_PYTHON
getting the same issue using nearly the same setup except for mit-krb5 instead of heimdal: [IP-] [ ] net-fs/autofs-5.1.1-r1:0 [IP-] [ ] net-nds/openldap-2.4.38-r2:0 [IP-] [ ] dev-libs/openssl-1.0.2h:0 [IP-] [ ] dev-libs/cyrus-sasl-2.1.26-r9:2 [IP-] [ ] app-crypt/mit-krb5-1.14.2:0 also, my cyrus-sasl has no additional patches, it's use flags are: # equery u cyrus-sasl [ Legend : U - final flag setting for installation] [ : I - package is installed with flag ] [ Colors : set, unset ] * Found these USE flags for dev-libs/cyrus-sasl-2.1.26-r9: U I - - abi_x86_32 : 32-bit (x86) libraries - - authdaemond : Add Courier-IMAP authdaemond unix socket support (net-mail/courier-imap, mail-mta/courier) + + berkdb : Add support for sys-libs/db (Berkeley DB for MySQL) + + gdbm : Add support for sys-libs/gdbm (GNU database libraries) - - java : Add support for Java + + kerberos : Add kerberos support - - ldapdb : Enable ldapdb plugin - - mysql : Add mySQL Database support + + openldap : Add ldap support for saslauthd + + pam : Add support for PAM (Pluggable Authentication Modules) - DANGEROUS to arbitrarily flip - - postgres : Add support for the postgresql database - - sample : Enable sample client and server - - sqlite : Add support for sqlite - embedded sql database - - srp : Enable SRP authentication + + ssl : Add support for Secure Socket Layer connections - - static-libs : Build static versions of dynamic libraries as well + + urandom : Use /dev/urandom instead of /dev/random # emerge --info Portage 2.2.28 (python 3.4.3-final-0, hardened/linux/amd64, gcc-4.9.3, glibc-2.22-r4, 4.4.8-hardened-r1 x86_64) ================================================================= System uname: Linux-4.4.8-hardened-r1-x86_64-Intel-R-_Core-TM-_i7-3770_CPU_@_3.40GHz-with-gentoo-2.2 KiB Mem: 32662184 total, 32242004 free KiB Swap: 575484 total, 575484 free Timestamp of repository gentoo: Sat, 18 Jun 2016 06:30:01 +0000 sh bash 4.3_p42-r1 ld GNU ld (Gentoo 2.25.1 p1.1) 2.25.1 app-shells/bash: 4.3_p42-r1::gentoo dev-lang/perl: 5.20.2::gentoo dev-lang/python: 2.7.10-r1::gentoo, 3.4.3-r1::gentoo dev-util/cmake: 3.3.1-r1::gentoo dev-util/pkgconfig: 0.28-r2::gentoo sys-apps/baselayout: 2.2::gentoo sys-apps/openrc: 0.19.1::gentoo sys-apps/sandbox: 2.10-r1::gentoo sys-devel/autoconf: 2.13::gentoo, 2.69::gentoo sys-devel/automake: 1.11.6-r1::gentoo, 1.13.4::gentoo, 1.14.1::gentoo, 1.15::gentoo sys-devel/binutils: 2.25.1-r1::gentoo sys-devel/gcc: 4.9.3::gentoo sys-devel/gcc-config: 1.7.3::gentoo sys-devel/libtool: 2.4.6::gentoo sys-devel/make: 4.1-r1::gentoo sys-kernel/linux-headers: 4.3::gentoo (virtual/os-headers) sys-libs/glibc: 2.22-r4::gentoo Repositories: gentoo location: /var/portage sync-type: rsync sync-uri: rsync://rsync.gentoo.org/gentoo-portage priority: -1000 sync-rsync-extra-opts: --exclude-from=/etc/portage/rsync.exclude razamatan location: /usr/local/portage masters: gentoo priority: 0 ACCEPT_KEYWORDS="amd64" ACCEPT_LICENSE="* -@EULA" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-O2 -march=native -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /lib64/rc/sh /usr/share/gnupg/qualified.txt /usr/share/vte/termcap-0.0/xterm" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo" CXXFLAGS="-O2 -march=native -pipe" DISTDIR="/usr/portage/distfiles" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr" FFLAGS="-O2 -pipe" GENTOO_MIRRORS="http://gentoo.osuosl.org http://gentoo.oregonstate.edu http://ftp.ucsb.edu/pub/mirrors/linux/gentoo http://www.ibiblio.org/pub/Linux/distributions/gentoo" LANG="en_US.utf8" LC_ALL="en_US.UTF-8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" MAKEOPTS="-j6" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_EXTRA_OPTS="--exclude-from=/etc/portage/rsync.exclude" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git" PORTAGE_TMPDIR="/var/tmp" USE="256-color X aac aacplus acl acpi aes alsa amd64 ao audiofile avahi avx bash-completion bazaar berkdb boost bzip2 cairo caps cli consolekit cracklib crypt cscope css ctype cxx dbus dri drm dts encode exif faac fat fbcon ffmpeg fftw flac fontconfig gallium gdbm gif git gmp gnome-keyring gnutls gssapi gudev hardened hwdb iconv icu id3tag idn imagemagick imap inotify ipv6 jpeg jpeg2k justify kerberos keymap lame ldap libnotify lm_sensors logrotate mad matroska mbox md5sum mime mms mmx mmxext modules mp3 mp4 mpd mpeg mpeg2 mplayer multilib musepack ncurses netboot network nfs nfsidmap nfsv4 nls nptl offensive ogg ogm opengl openldap openmp openssl pam pax_kernel pcre pdf perl pie png policykit popcnt posix pulseaudio python readline samba sasl screen sdl seccomp session sftp smp sockets sse sse2 sse3 sse4_1 sse4_2 ssl ssp ssse3 svg syslog taglib tcpd threads tiff tls truetype udev unicode urandom userlocales utf8 vaapi vcd vim-syntax vorbis wav wma x264 xattr xcb xft xine xinerama xml xtpax xvid xvmc zeroconf zip zlib" ABI_X86="64" ALSA_CARDS="hda-intel" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="en en_US ko" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python3_4" QEMU_SOFTMMU_TARGETS="x86_64" QEMU_USER_TARGETS="x86_64" RUBY_TARGETS="ruby20 ruby21" USERLAND="GNU" VIDEO_CARDS="intel vesa" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CC, CPPFLAGS, CTARGET, CXX, EMERGE_DEFAULT_OPTS, INSTALL_MASK, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, USE_PYTHON
i've downgraded autofs to 5.0.7-r4 and things are peachy again.
(In reply to razamatan from comment #3) > i've downgraded autofs to 5.0.7-r4 and things are peachy again. Same here, got mit-kerberos as well
Actually bug https://bugs.gentoo.org/show_bug.cgi?id=578742 has a "workaround" that works for me
unmasking and version bumping to 5.1.2 w/o any config changes works for me.
Can you reproduce with current versions? 5.1.2? 5.1.5?