Bug 337072 – openldap-2.4.23 with +gnutls crash

• Product: Gentoo Linux
• Status: RESOLVED TEST-REQUEST

[Description Benjamin Schindler 2010-09-13 12:27:07 UTC]

I just emerged openldap with USE=gnutls (required by cups-1.4). I'm using ldap-logins on my system. openldap crashed all the time meaning I wasn't even able to execute su, opeb a shell whatever. Somebody on #gentoo gave me a package so I was able to have a running system again. 
I'm setting this bug as critical. If you don't happen to have a root shell open there is no way you can revert as there is no way to get a root shell (!)

Reproducible: Always

Steps to Reproduce:
1. Take a system which uses sldap for logins
2. Emerge openldap-2.4.23 with +gnutls
3. burn! :)




hundertwasser packages # emerge --info
Portage 2.2_rc81 (default/linux/amd64/10.0, gcc-4.4.4, glibc-2.11.2-r0, 2.6.34-gentoo-r6 x86_64)
=================================================================
System uname: Linux-2.6.34-gentoo-r6-x86_64-Intel-R-_Xeon-R-_CPU_E5430_@_2.66GHz-with-gentoo-1.12.13
Timestamp of tree: Mon, 13 Sep 2010 05:45:01 +0000
distcc 3.1 x86_64-pc-linux-gnu [disabled]
app-shells/bash:     4.0_p37
dev-java/java-config: 2.1.11
dev-lang/python:     2.4.6, 2.5.4-r3, 2.6.5-r3, 3.1.2-r4
dev-util/cmake:      2.8.1-r2
sys-apps/baselayout: 1.12.13
sys-apps/sandbox:    2.2
sys-devel/autoconf:  2.13, 2.65
sys-devel/automake:  1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.3, 1.11.1
sys-devel/binutils:  2.20.1-r1
sys-devel/gcc:       4.4.4-r1
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.6b
sys-devel/make:      3.81-r2
virtual/os-headers:  2.6.30-r1 (sys-kernel/linux-headers)
ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="* -@EULA dlj-1.1 skype-eula googleearth AdobeFlash-10.1"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe -march=native"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/X11/xkb /usr/share/config /var/lib/hsqldb /var/lib/redmine/config"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/portage /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-O2 -pipe -march=native"
DISTDIR="/usr/portage/distfiles"
FEATURES="assume-digests distlocks fixlafiles fixpackages news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch"
GENTOO_MIRRORS="ftp://mirror.switch.ch/mirror/gentoo/ "
LANG="en_US.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
LINGUAS="en"
MAKEOPTS="-j16"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage/layman/kde /usr/local/portage"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="X aac accessibility acl alsa amd64 bash-completion berkdb bzip2 cairo chm cleartype cli consolekit cracklib crypt cups cupsddk curl cxx dbus dri dvd encode exif expat fam ffmpeg fortran gdbm gif git gnome gpm gtk hal iconv inotify ipv6 jpeg jpeg2k kde kdrive kerberos kpathsea latex ldap libnotify lm_sensors mad mercurial mmx mng modules mp3 msn mudflap multilib mysql ncurses nls nptl nptlonly opengl openmp oscar pam pch pcre pdf perl png policykit ppds pppd python qt3support qt4 raw rdp readline reflection samba sasl sdl semantic-desktop session snmp sound spell sql sse sse2 ssl startup-notification subversion svg sysfs taglib tcpd theora threads unicode vim-syntax vorbis webkit xattr xcb xcomposite xinerama xorg xvid zeroconf zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="nvidia" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" 
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

[Comment 1 Benjamin Schindler 2010-09-13 12:30:36 UTC]

*** glibc detected *** /usr/lib64/misc/utempter/utempter: double free or corruption (top): 0x0000000000636d60 ***
======= Backtrace: =========
/lib/libc.so.6(+0x740f8)[0x7f702bf1d0f8]
/lib/libc.so.6(cfree+0x6c)[0x7f702bf21f5c]
/usr/lib/libldap-2.4.so.2(+0x34979)[0x7f702b86c979]
/usr/lib/libldap-2.4.so.2(+0x32a2f)[0x7f702b86aa2f]
/usr/lib/libldap-2.4.so.2(+0x32e40)[0x7f702b86ae40]
/usr/lib/libldap-2.4.so.2(+0x32f4e)[0x7f702b86af4e]
/usr/lib/libldap-2.4.so.2(ldap_int_tls_start+0x5c)[0x7f702b86b12c]
/usr/lib/libldap-2.4.so.2(ldap_int_open_connection+0x123)[0x7f702b8469c3]
/usr/lib/libldap-2.4.so.2(ldap_new_connection+0x18f)[0x7f702b8599ff]
/usr/lib/libldap-2.4.so.2(ldap_open_defconn+0x1d)[0x7f702b84686d]
/usr/lib/libldap-2.4.so.2(ldap_send_initial_request+0xb8)[0x7f702b85a988]
/usr/lib/libldap-2.4.so.2(ldap_sasl_bind+0x171)[0x7f702b8501d1]
/usr/lib/libldap-2.4.so.2(ldap_simple_bind+0x79)[0x7f702b850709]
/lib/libnss_ldap.so.2(+0x457b)[0x7f702ba8057b]
/lib/libnss_ldap.so.2(+0x70a7)[0x7f702ba830a7]
/lib/libnss_ldap.so.2(+0x7973)[0x7f702ba83973]
/lib/libnss_ldap.so.2(+0x7d04)[0x7f702ba83d04]
/lib/libnss_ldap.so.2(_nss_ldap_getpwuid_r+0x49)[0x7f702ba84399]
/lib/libc.so.6(getpwuid_r+0xe2)[0x7f702bf4bc52]
/lib/libc.so.6(getpwuid+0x6f)[0x7f702bf4b51f]
/usr/lib64/misc/utempter/utempter[0x400ac7]
/lib/libc.so.6(__libc_start_main+0xe6)[0x7f702bec7ba6]
/usr/lib64/misc/utempter/utempter[0x400929]
======= Memory map: ========
00400000-00401000 r-xp 00000000 08:03 38371362                           /usr/lib64/misc/utempter/utempter
00601000-00602000 r--p 00001000 08:03 38371362                           /usr/lib64/misc/utempter/utempter
00602000-00603000 rw-p 00002000 08:03 38371362                           /usr/lib64/misc/utempter/utempter
00603000-00645000 rw-p 00000000 00:00 0                                  [heap]
7f7024000000-7f7024021000 rw-p 00000000 00:00 0 
7f7024021000-7f7028000000 ---p 00000000 00:00 0 
7f7028eed000-7f7028f03000 r-xp 00000000 08:03 57919022                   /lib64/libgcc_s.so.1
7f7028f03000-7f7029102000 ---p 00016000 08:03 57919022                   /lib64/libgcc_s.so.1
7f7029102000-7f7029103000 r--p 00015000 08:03 57919022                   /lib64/libgcc_s.so.1
7f7029103000-7f7029104000 rw-p 00016000 08:03 57919022                   /lib64/libgcc_s.so.1
7f7029104000-7f7029109000 r-xp 00000000 08:03 67977858                   /lib64/libnss_dns-2.11.2.so
7f7029109000-7f7029308000 ---p 00005000 08:03 67977858                   /lib64/libnss_dns-2.11.2.so
7f7029308000-7f7029309000 r--p 00004000 08:03 67977858                   /lib64/libnss_dns-2.11.2.so
7f7029309000-7f702930a000 rw-p 00005000 08:03 67977858                   /lib64/libnss_dns-2.11.2.so
7f702930a000-7f702930d000 r-xp 00000000 08:03 37743542                   /usr/lib64/libgpg-error.so.0.5.0
7f702930d000-7f702950c000 ---p 00003000 08:03 37743542                   /usr/lib64/libgpg-error.so.0.5.0
7f702950c000-7f702950d000 r--p 00002000 08:03 37743542                   /usr/lib64/libgpg-error.so.0.5.0
7f702950d000-7f702950e000 rw-p 00003000 08:03 37743542                   /usr/lib64/libgpg-error.so.0.5.0
7f702950e000-7f7029581000 r-xp 00000000 08:03 67240337                   /usr/lib64/libgcrypt.so.11.5.3
7f7029581000-7f7029781000 ---p 00073000 08:03 67240337                   /usr/lib64/libgcrypt.so.11.5.3
7f7029781000-7f7029782000 r--p 00073000 08:03 67240337                   /usr/lib64/libgcrypt.so.11.5.3
7f7029782000-7f7029785000 rw-p 00074000 08:03 67240337                   /usr/lib64/libgcrypt.so.11.5.3
7f7029785000-7f7029799000 r-xp 00000000 08:03 57917485                   /lib64/libz.so.1.2.3
7f7029799000-7f7029998000 ---p 00014000 08:03 57917485                   /lib64/libz.so.1.2.3
7f7029998000-7f7029999000 r--p 00013000 08:03 57917485                   /lib64/libz.so.1.2.3
7f7029999000-7f702999a000 rw-p 00014000 08:03 57917485                   /lib64/libz.so.1.2.3
7f702999a000-7f70299aa000 r-xp 00000000 08:03 67634166                   /usr/lib64/libtasn1.so.3.1.9
7f70299aa000-7f7029ba9000 ---p 00010000 08:03 67634166                   /usr/lib64/libtasn1.so.3.1.9
7f7029ba9000-7f7029baa000 r--p 0000f000 08:03 67634166                   /usr/lib64/libtasn1.so.3.1.9
7f7029baa000-7f7029bab000 rw-p 00010000 08:03 67634166                   /usr/lib64/libtasn1.so.3.1.9
7f7029bab000-7f7029bc2000 r-xp 00000000 08:03 67977852                   /lib64/libpthread-2.11.2.so
7f7029bc2000-7f7029dc1000 ---p 00017000 08:03 67977852                   /lib64/libpthread-2.11.2.so
7f7029dc1000-7f7029dc2000 r--p 00016000 08:03 67977852                   /lib64/libpthread-2.11.2.so
7f7029dc2000-7f7029dc3000 rw-p 00017000 08:03 67977852                   /lib64/libpthread-2.11.2.so
7f7029dc3000-7f7029dc7000 rw-p 00000000 00:00 0
7f7029dc7000-7f7029dce000 r-xp 00000000 08:03 67617437                   /usr/lib64/libkrb5support.so.0.1
7f7029dce000-7f7029fcd000 ---p 00007000 08:03 67617437                   /usr/lib64/libkrb5support.so.0.1
7f7029fcd000-7f7029fce000 r--p 00006000 08:03 67617437                   /usr/lib64/libkrb5support.so.0.1
7f7029fce000-7f7029fcf000 rw-p 00007000 08:03 67617437                   /usr/lib64/libkrb5support.so.0.1
7f7029fcf000-7f7029ff3000 r-xp 00000000 08:03 67616987                   /usr/lib64/libk5crypto.so.3.1
7f7029ff3000-7f702a1f3000 ---p 00024000 08:03 67616987                   /usr/lib64/libk5crypto.so.3.1
7f702a1f3000-7f702a1f4000 r--p 00024000 08:03 67616987                   /usr/lib64/libk5crypto.so.3.1
7f702a1f4000-7f702a1f5000 rw-p 00025000 08:03 67616987                   /usr/lib64/libk5crypto.so.3.1
7f702a1f5000-7f702a1fd000 r-xp 00000000 08:03 67977848                   /lib64/libcrypt-2.11.2.so
7f702a1fd000-7f702a3fd000 ---p 00008000 08:03 67977848                   /lib64/libcrypt-2.11.2.so
7f702a3fd000-7f702a3fe000 r--p 00008000 08:03 67977848                   /lib64/libcrypt-2.11.2.so
7f702a3fe000-7f702a3ff000 rw-p 00009000 08:03 67977848                   /lib64/libcrypt-2.11.2.so
7f702a3ff000-7f702a42d000 rw-p 00000000 00:00 0
7f702a42d000-7f702a4d3000 r-xp 00000000 08:03 67453261                   /usr/lib64/libgnutls.so.26.16.8
7f702a4d3000-7f702a6d2000 ---p 000a6000 08:03 67453261                   /usr/lib64/libgnutls.so.26.16.8
7f702a6d2000-7f702a6d9000 r--p 000a5000 08:03 67453261                   /usr/lib64/libgnutls.so.26.16.8
7f702a6d9000-7f702a6da000 rw-p 000ac000 08:03 67453261                   /usr/lib64/libgnutls.so.26.16.8
7f702a6da000-7f702a6db000 rw-p 00000000 00:00 0 
7f702a6db000-7f702a6ee000 r-xp 00000000 08:03 67977856                   /lib64/libresolv-2.11.2.so
7f702a6ee000-7f702a8ee000 ---p 00013000 08:03 67977856                   /lib64/libresolv-2.11.2.so
7f702a8ee000-7f702a8ef000 r--p 00013000 08:03 67977856                   /lib64/libresolv-2.11.2.so*** glibc detected *** /bin/bash: double free or corruption (top): 0x0000000000712c10 ***
======= Backtrace: =========
/lib/libc.so.6(+0x740f8)[0x7fdffa8f70f8]
/lib/libc.so.6(cfree+0x6c)[0x7fdffa8fbf5c]
/usr/lib/libldap-2.4.so.2(+0x34979)[0x7fdff9f38979]
/usr/lib/libldap-2.4.so.2(+0x32a2f)[0x7fdff9f36a2f]
/usr/lib/libldap-2.4.so.2(+0x32e40)[0x7fdff9f36e40]
/usr/lib/libldap-2.4.so.2(+0x32f4e)[0x7fdff9f36f4e]
/usr/lib/libldap-2.4.so.2(ldap_int_tls_start+0x5c)[0x7fdff9f3712c]
/usr/lib/libldap-2.4.so.2(ldap_int_open_connection+0x123)[0x7fdff9f129c3]
/usr/lib/libldap-2.4.so.2(ldap_new_connection+0x18f)[0x7fdff9f259ff]
/usr/lib/libldap-2.4.so.2(ldap_open_defconn+0x1d)[0x7fdff9f1286d]
/usr/lib/libldap-2.4.so.2(ldap_send_initial_request+0xb8)[0x7fdff9f26988]
/usr/lib/libldap-2.4.so.2(ldap_sasl_bind+0x171)[0x7fdff9f1c1d1]
/usr/lib/libldap-2.4.so.2(ldap_simple_bind+0x79)[0x7fdff9f1c709]
/lib/libnss_ldap.so.2(+0x457b)[0x7fdffa14c57b]
/lib/libnss_ldap.so.2(+0x70a7)[0x7fdffa14f0a7]
/lib/libnss_ldap.so.2(+0x7973)[0x7fdffa14f973]
/lib/libnss_ldap.so.2(+0x7d04)[0x7fdffa14fd04]
/lib/libnss_ldap.so.2(_nss_ldap_getpwuid_r+0x49)[0x7fdffa150399]
/lib/libc.so.6(getpwuid_r+0xe2)[0x7fdffa925c52]
/lib/libc.so.6(getpwuid+0x6f)[0x7fdffa92551f]
/bin/bash(get_current_user_info+0x3b)[0x41dafb]
/bin/bash[0x41e265]
/bin/bash(main+0x71a)[0x41f1da]
/lib/libc.so.6(__libc_start_main+0xe6)[0x7fdffa8a1ba6]
/bin/bash[0x41d9f9]
======= Memory map: ========
00400000-004ce000 r-xp 00000000 08:03 67633373                           /bin/bash
006cd000-006ce000 r--p 000cd000 08:03 67633373                           /bin/bash
006ce000-006d7000 rw-p 000ce000 08:03 67633373                           /bin/bash
006d7000-0071f000 rw-p 00000000 00:00 0                                  [heap]
7fdff0000000-7fdff0021000 rw-p 00000000 00:00 0 
7fdff0021000-7fdff4000000 ---p 00000000 00:00 0 
7fdff77bd000-7fdff77d3000 r-xp 00000000 08:03 57919022                   /lib64/libgcc_s.so.1
7fdff77d3000-7fdff79d2000 ---p 00016000 08:03 57919022                   /lib64/libgcc_s.so.1
7fdff79d2000-7fdff79d3000 r--p 00015000 08:03 57919022                   /lib64/libgcc_s.so.1
7fdff79d3000-7fdff79d4000 rw-p 00016000 08:03 57919022                   /lib64/libgcc_s.so.1
7fdff79d4000-7fdff79d9000 r-xp 00000000 08:03 67977858                   /lib64/libnss_dns-2.11.2.so
7fdff79d9000-7fdff7bd8000 ---p 00005000 08:03 67977858                   /lib64/libnss_dns-2.11.2.so
7fdff7bd8000-7fdff7bd9000 r--p 00004000 08:03 67977858                   /lib64/libnss_dns-2.11.2.so
7fdff7bd9000-7fdff7bda000 rw-p 00005000 08:03 67977858                   /lib64/libnss_dns-2.11.2.so
7fdff7bda000-7fdff7bdd000 r-xp 00000000 08:03 37743542                   /usr/lib64/libgpg-error.so.0.5.0
7fdff7bdd000-7fdff7ddc000 ---p 00003000 08:03 37743542                   /usr/lib64/libgpg-error.so.0.5.0
7fdff7ddc000-7fdff7ddd000 r--p 00002000 08:03 37743542                   /usr/lib64/libgpg-error.so.0.5.0
7fdff7ddd000-7fdff7dde000 rw-p 00003000 08:03 37743542                   /usr/lib64/libgpg-error.so.0.5.0
7fdff7dde000-7fdff7e51000 r-xp 00000000 08:03 67240337                   /usr/lib64/libgcrypt.so.11.5.3
7fdff7e51000-7fdff8051000 ---p 00073000 08:03 67240337                   /usr/lib64/libgcrypt.so.11.5.3
7fdff8051000-7fdff8052000 r--p 00073000 08:03 67240337                   /usr/lib64/libgcrypt.so.11.5.3
7fdff8052000-7fdff8055000 rw-p 00074000 08:03 67240337                   /usr/lib64/libgcrypt.so.11.5.3
7fdff8055000-7fdff8069000 r-xp 00000000 08:03 57917485                   /lib64/libz.so.1.2.3
7fdff8069000-7fdff8268000 ---p 00014000 08:03 57917485                   /lib64/libz.so.1.2.3
7fdff8268000-7fdff8269000 r--p 00013000 08:03 57917485                   /lib64/libz.so.1.2.3
7fdff8269000-7fdff826a000 rw-p 00014000 08:03 57917485                   /lib64/libz.so.1.2.3
7fdff826a000-7fdff827a000 r-xp 00000000 08:03 67634166                   /usr/lib64/libtasn1.so.3.1.9

Warning: Program '/bin/bash' crashed.

[Comment 2 Tully Gray 2010-09-13 12:42:34 UTC]

I had segfaults with OpenLDAP built with GNU TLS also. This occurred on x86 and x86_64. StartTLS works fine when OpenLDAP is built without the "gnutls" USE flag, using only the OpenSSL library.

[Comment 3 Chuck Theobald 2010-09-14 00:28:22 UTC]

Following emerge -uDN world with USE set to include gnutls in /etc/make.conf, I experienced severe memory corruption in trying to do anything LDAP-auth related. Typical dumps are as follows:

malbec ~ # id
*** glibc detected *** id: double free or corruption (top): 0x0000000000bb95f0 ***
======= Backtrace: =========
/lib/libc.so.6(+0x72966)[0x7f0e64dea966]
/lib/libc.so.6(cfree+0x6c)[0x7f0e64def71c]
/usr/lib/libldap-2.4.so.2(+0x316c1)[0x7f0e6473c6c1]
/usr/lib/libldap-2.4.so.2(+0x2f826)[0x7f0e6473a826]
/usr/lib/libldap-2.4.so.2(+0x2fc30)[0x7f0e6473ac30]
/usr/lib/libldap-2.4.so.2(+0x2fd3e)[0x7f0e6473ad3e]
/usr/lib/libldap-2.4.so.2(ldap_int_tls_start+0x52)[0x7f0e6473af12]
/lib/libnss_ldap.so.2(+0x63e8)[0x7f0e649513e8]
/lib/libnss_ldap.so.2(+0x6adc)[0x7f0e64951adc]
/lib/libnss_ldap.so.2(+0x72ef)[0x7f0e649522ef]
/lib/libnss_ldap.so.2(+0x7953)[0x7f0e64952953]
/lib/libnss_ldap.so.2(_nss_ldap_getgrgid_r+0x53)[0x7f0e64953053]
/lib/libc.so.6(getgrgid_r+0xdd)[0x7f0e64e1717d]
/lib/libc.so.6(getgrgid+0x6f)[0x7f0e64e1682f]
id[0x401ded]
/lib/libc.so.6(__libc_start_main+0xfd)[0x7f0e64d96bbd]
id[0x401469]
======= Memory map: ========
00400000-00408000 r-xp 00000000 08:13 14713018                           /usr/bin/id
00607000-00608000 r--p 00007000 08:13 14713018                           /usr/bin/id
00608000-00609000 rw-p 00008000 08:13 14713018                           /usr/bin/id
00b89000-00bcb000 rw-p 00000000 00:00 0                                  [heap]
7f0e5c000000-7f0e5c021000 rw-p 00000000 00:00 0 
7f0e5c021000-7f0e60000000 ---p 00000000 00:00 0 
7f0e62b40000-7f0e62b55000 r-xp 00000000 08:13 3735811                    /lib64/libgcc_s.so.1
7f0e62b55000-7f0e62d55000 ---p 00015000 08:13 3735811                    /lib64/libgcc_s.so.1
7f0e62d55000-7f0e62d56000 r--p 00015000 08:13 3735811                    /lib64/libgcc_s.so.1
7f0e62d56000-7f0e62d57000 rw-p 00016000 08:13 3735811                    /lib64/libgcc_s.so.1
7f0e62d57000-7f0e62d5c000 r-xp 00000000 08:13 780033                     /lib64/libnss_dns-2.11.2.so
7f0e62d5c000-7f0e62f5b000 ---p 00005000 08:13 780033                     /lib64/libnss_dns-2.11.2.so
7f0e62f5b000-7f0e62f5c000 r--p 00004000 08:13 780033                     /lib64/libnss_dns-2.11.2.so
7f0e62f5c000-7f0e62f5d000 rw-p 00005000 08:13 780033                     /lib64/libnss_dns-2.11.2.so
7f0e62f5d000-7f0e62f60000 r-xp 00000000 08:13 13238636                   /usr/lib64/libgpg-error.so.0.5.0
7f0e62f60000-7f0e6315f000 ---p 00003000 08:13 13238636                   /usr/lib64/libgpg-error.so.0.5.0
7f0e6315f000-7f0e63160000 r--p 00002000 08:13 13238636                   /usr/lib64/libgpg-error.so.0.5.0
7f0e63160000-7f0e63161000 rw-p 00003000 08:13 13238636                   /usr/lib64/libgpg-error.so.0.5.0
7f0e63161000-7f0e631d4000 r-xp 00000000 08:13 14369709                   /usr/lib64/libgcrypt.so.11.5.3
7f0e631d4000-7f0e633d3000 ---p 00073000 08:13 14369709                   /usr/lib64/libgcrypt.so.11.5.3
7f0e633d3000-7f0e633d4000 r--p 00072000 08:13 14369709                   /usr/lib64/libgcrypt.so.11.5.3
7f0e633d4000-7f0e633d7000 rw-p 00073000 08:13 14369709                   /usr/lib64/libgcrypt.so.11.5.3
7f0e633d7000-7f0e633eb000 r-xp 00000000 08:13 3735706                    /lib64/libz.so.1.2.3
7f0e633eb000-7f0e635ea000 ---p 00014000 08:13 3735706                    /lib64/libz.so.1.2.3
7f0e635ea000-7f0e635eb000 r--p 00013000 08:13 3735706                    /lib64/libz.so.1.2.3
7f0e635eb000-7f0e635ec000 rw-p 00014000 08:13 3735706                    /lib64/libz.so.1.2.3
7f0e635ec000-7f0e635fc000 r-xp 00000000 08:13 13985900                   /usr/lib64/libtasn1.so.3.1.9
7f0e635fc000-7f0e637fb000 ---p 00010000 08:13 13985900                   /usr/lib64/libtasn1.so.3.1.9
7f0e637fb000-7f0e637fc000 r--p 0000f000 08:13 13985900                   /usr/lib64/libtasn1.so.3.1.9
7f0e637fc000-7f0e637fd000 rw-p 00010000 08:13 13985900                   /usr/lib64/libtasn1.so.3.1.9
7f0e637fd000-7f0e63814000 r-xp 00000000 08:13 779995                     /lib64/libpthread-2.11.2.so
7f0e63814000-7f0e63a13000 ---p 00017000 08:13 779995                     /lib64/libpthread-2.11.2.so
7f0e63a13000-7f0e63a14000 r--p 00016000 08:13 779995                     /lib64/libpthread-2.11.2.so
7f0e63a14000-7f0e63a15000 rw-p 00017000 08:13 779995                     /lib64/libpthread-2.11.2.so
7f0e63a15000-7f0e63a19000 rw-p 00000000 00:00 0 
7f0e63a19000-7f0e63abd000 r-xp 00000000 08:13 14828643                   /usr/lib64/libgnutls.so.26.16.8
7f0e63abd000-7f0e63cbc000 ---p 000a4000 08:13 14828643                   /usr/lib64/libgnutls.so.26.16.8
7f0e63cbc000-7f0e63cc3000 r--p 000a3000 08:13 14828643                   /usr/lib64/libgnutls.so.26.16.8
7f0e63cc3000-7f0e63cc4000 rw-p 000aa000 08:13 14828643                   /usr/lib64/libgnutls.so.26.16.8
7f0e63cc4000-7f0e63cc5000 rw-p 00000000 00:00 0 
7f0e63cc5000-7f0e63cd8000 r-xp 00000000 08:13 779978                     /lib64/libresolv-2.11.2.so
7f0e63cd8000-7f0e63ed8000 ---p 00013000 08:13 779978                     /lib64/libresolv-2.11.2.so
7f0e63ed8000-7f0e63ed9000 r--p 00013000 08:13 779978                     /lib64/libresolv-2.11.2.so
7f0e63ed9000-7f0e63eda000 rw-p 00014000 08:13 779978                     /lib64/libresolv-2.11.2.so
7f0e63eda000-7f0e63edc000 rw-p 00000000 00:00 0 
7f0e63edc000-7f0e63ef1000 r-xp 00000000 08:13 779981                     /lib64/libnsl-2.11.2.so
7f0e63ef1000-7f0e640f0000 ---p 00015000 08:13 779981                     /lib64/libnsl-2.11.2.so
7f0e640f0000-7f0e640f1000 r--p 00014000 08:13 779981                     /lib64/libnsl-2.11.2.so
7f0e640f1000-7f0e640f2000 rw-p 00015000 08:13 779981                     /lib64/libnsl-2.11.2.so
7f0e640f2000-7f0e640f4000 rw-p 00000000 00:00 0 
7f0e640f4000-7f0e640f6000 r-xp 00000000 08:13 780040                     /lib64/libdl-2.11.2.so
7f0e640f6000-7f0e642f6000 ---p 00002000 08:13 780040                     /lib64/libdl-2.11.2.so
7f0e642f6000-7f0e642f7000 r--p 00002000 08:13 780040                     /lib64/libdl-2.11.2.so
7f0e642f7000-7f0e642f8000 rw-p 00003000 08:13 780040                     /lib64/libdl-2.11.2.so
7f0e642f8000-7f0e642fb000 r-xp 00000000 08:13 13215904                   /lib64/libcom_err.so.2.1
7f0e642fb000-7f0e644fa000 ---p 00003000 08:13 13215904                   /lib64/libcom_err.so.2.1
7f0e644fa000-7f0e644fb000 r--p 00002000 08:13 13215904                   /lib64/libcom_err.so.2.1
7f0e644fb000-7f0e644fc000 rw-p 00003000 08:13 13215904                   /lib64/libcom_err.so.2.1
7f0e644fc000-7f0e64509000 r-xp 00000000 08:13 14469659                   /usr/lib64/liblber-2.4.so.2.5.6
7f0e64509000-7f0e64709000 ---p 0000d000 08:13 14469659                   /usr/lib64/liblber-2.4.so.2.5.6
7f0e64709000-7f0e6470a000 r--p 0000d000 08:13 14469659                   /usr/lib64/liblber-2.4.so.2.5.6
7f0e6470a000-7f0e6470b000 rw-p 0000e000 08:13 14469659                   /usr/lib64/liblber-2.4.so.2.5.6
7f0e6470b000-7f0e64749000 r-xp 00000000 08:13 14469599                   /usr/lib64/libldap-2.4.so.2.5.6uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel),11(floppy),20(dialout),26(tape),27(video),512Aborted
malbec ~ # 

The "fix" (or rather, avoidance therapy) is to build cups with gnutls and everything else without. Do not know if cups would illustrate the same problem, but we have cups only to satisfy firefox and typically do not print from firefox.

[Comment 4 Benjamin Schindler 2010-09-14 06:58:35 UTC]

For that, you need to disable ldap support in cups. Otherwize, cups wants gnutls in openldap (at least it's the case for 1.4). Since I'm using ldap-logins, I'm not sure what the effects of cups sans ldap are, so I rather don't try atm

[Comment 5 Robin Johnson 2012-02-12 20:31:04 UTC]

Please retest with latest openldap that has the gnutls-gcrypt changes.