I cant start named. Everytime I try it crashs with segmentation fault. This only happens with the "-u named" option strace : munmap(0xb76ec000, 4096) = 0 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 4 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 setsockopt(4, SOL_SOCKET, SO_KEEPALIVE, [1], 4) = 0 setsockopt(4, SOL_TCP, TCP_NODELAY, [1], 4) = 0 fcntl64(4, F_GETFL) = 0x2 (flags O_RDWR) fcntl64(4, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(4, {sa_family=AF_INET, sin_port=htons(636), sin_addr=inet_addr("127.0.0.1")}, 16) = -1 EINPROGRESS (Operation now in progress) poll([{fd=4, events=POLLOUT|POLLERR|POLLHUP}], 1, 30000) = 1 ([{fd=4, revents=POLLOUT}]) getpeername(4, {sa_family=AF_INET, sin_port=htons(636), sin_addr=inet_addr("127.0.0.1")}, [16]) = 0 fcntl64(4, F_GETFL) = 0x802 (flags O_RDWR|O_NONBLOCK) fcntl64(4, F_SETFL, O_RDWR) = 0 time(NULL) = 1288873509 open("/dev/urandom", O_RDONLY|O_NOCTTY|O_NONBLOCK) = 5 fstat64(5, {st_mode=S_IFCHR|0666, st_rdev=makedev(1, 9), ...}) = 0 poll([{fd=5, events=POLLIN}], 1, 10) = 1 ([{fd=5, revents=POLLIN}]) read(5, "\7\373WA[\211\307\216PT\275\t\247\30`\236w\7\322\33G\341\205e&\360\3\211T\363\244b", 32) = 32 close(5) = 0 getuid32() = 0 time(NULL) = 1288873509 time(NULL) = 1288873509 --- SIGSEGV (Segmentation fault) @ 0 (0) --- +++ killed by SIGSEGV +++ Here you can see that it opens "/dev/urandom" BUT i said no Urandom. : [ebuild R ] net-dns/bind-9.4.3_p5 USE="berkdb ipv6 ldap mysql postgres ssl threads -dlz -doc -idn -odbc -resolvconf (-selinux) -urandom" 0 k Reproducible: Always Steps to Reproduce: 1. Just start named with -u option Workaround: edit /etc/init.d/named: start() { ebegin "Starting ${CHROOT:+chrooted }named" checkconfig || return 1 start-stop-daemon --start --quiet --pidfile ${PIDFILE} \ --nicelevel ${NAMED_NICELEVEL:-0} \ --exec /usr/sbin/named \ -- -n ${CPU} ${OPTIONS} ${CHROOT:+-t} ${CHROOT} eend $? } and change rights : chmod 660 /etc/bind/rndc.key chown named.root /var/run/named/ chmod 775 /var/run/named/
Please try net-dns/bind-9.4.3_p5-r2 and also show me your named.log/debug.log or whatever else contains bind stuff related to the crash.
And post your `emerge --info' in a comment. And perhaps recompile bind with debug flags and obtain a gdb backtrace.
(In reply to comment #1) > Please try net-dns/bind-9.4.3_p5-r2 and also show me your named.log/debug.log > or whatever else contains bind stuff related to the crash. > Nothing changes. Same problem. No there is no log output created.
(In reply to comment #2) > And post your `emerge --info' in a comment. And perhaps recompile bind with > debug flags and obtain a gdb backtrace. > # gdb --args /usr/sbin/named -u named warning: Can not parse XML syscalls information; XML support was disabled at compile time. GNU gdb (Gentoo 7.0.1 p1) 7.0.1 Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i686-pc-linux-gnu". For bug reporting instructions, please see: <http://bugs.gentoo.org/>... Reading symbols from /usr/sbin/named...(no debugging symbols found)...done. (gdb) run Starting program: /usr/sbin/named -u named [Thread debugging using libthread_db enabled] Program received signal SIGSEGV, Segmentation fault. 0xb7c0b617 in engine_unlocked_finish () from /usr/lib/libcrypto.so.1.0.0 (gdb) Portage 2.1.8.3 (default/linux/x86/10.0/server, gcc-4.4.4, glibc-2.11.2-r2, 2.6.32-tuxonice-r7 i686) ================================================================= System uname: Linux-2.6.32-tuxonice-r7-i686-Genuine_Intel-R-_CPU_T2300_@_1.66GHz-with-gentoo-1.12.13 Timestamp of tree: Thu, 04 Nov 2010 11:15:01 +0000 ccache version 2.4 [disabled] app-shells/bash: 4.1_p7 dev-java/java-config: 2.1.11 dev-lang/python: 2.6.5-r3, 3.1.2-r4 dev-util/ccache: 2.4-r7 dev-util/cmake: 2.8.1-r2 sys-apps/baselayout: 1.12.13 sys-apps/sandbox: 2.3-r1 sys-devel/autoconf: 2.65-r1 sys-devel/automake: 1.10.3, 1.11.1 sys-devel/binutils: 2.20.1-r1 sys-devel/gcc: 4.4.3-r2, 4.4.4-r2 sys-devel/gcc-config: 1.4.1 sys-devel/libtool: 2.2.10 sys-devel/make: 3.81-r2 virtual/os-headers: 2.6.30-r1 ACCEPT_KEYWORDS="x86" ACCEPT_LICENSE="* -@EULA" CBUILD="i686-pc-linux-gnu" CFLAGS="-O2 -march=pentium4 -pipe" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /var/bind" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/eselect/postgresql /etc/fonts/fonts.conf /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo" CXXFLAGS="-O2 -march=pentium4 -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="assume-digests distlocks fixpackages news parallel-fetch protect-owned sandbox sfperms strict unmerge-logs unmerge-orphans userfetch" GENTOO_MIRRORS="ftp://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/ http://pandemonium.tiscali.de/pub/gentoo/ http://gd.tuwien.ac.at/opsys/linux/gentoo/ ftp://ftp.tu-clausthal.de/pub/linux/gentoo/" LANG="de_DE.utf8" LC_ALL="de_DE.utf8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" LINGUAS="de" MAKEOPTS="-j3" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/var/lib/layman/kolab" SYNC="rsync://rsync.de.gentoo.org/gentoo-portage" USE="accessibility acl acpi alsa apache2 arts async bash-completion berkdb bzip2 cdr cli cracklib crypt ctype cups cupsddk cxx daemon dbus discouraged dlna dmx dri dvd dvdr dvdread embrola encode exif exiscan-acl extras fam fbcondecor foomaticdb fortran ftp gcj gd gdbm gpm hal hash iconv iee1394 imap insecure-drivers ipv6 ipw3945 jadetex java javascript keberos kerberos ldap libextractor lm_sensors loop-aes maildir mbox mjpeg mmx modules mudflap multislot mysql ncurses nls nptl nptlonly nsplugin openal openmp openssl pam pcre pdf perl php postgres ppds pppd python rar readline rtc samba sasl sensord server session slang smp sse sse2 ssl stats subtitles sysfs tcl tcpd threads truetype unicode usb utf8 vcd vhosts vim-syntax wifi x86 xml xorg xvid zip zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="de" PHP_TARGETS="php5-2" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="radeon fglrx vesa" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Please start named from CLI with the same options and additionally with "-g" and if that doesn't show any errors try -d <debug-level>.
(In reply to comment #4) > (In reply to comment #2) > > And post your `emerge --info' in a comment. And perhaps recompile bind with > > debug flags and obtain a gdb backtrace. > > > > # gdb --args /usr/sbin/named -u named > > warning: Can not parse XML syscalls information; XML support was disabled at > compile time. > GNU gdb (Gentoo 7.0.1 p1) 7.0.1 > Copyright (C) 2009 Free Software Foundation, Inc. > License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> > This is free software: you are free to change and redistribute it. > There is NO WARRANTY, to the extent permitted by law. Type "show copying" > and "show warranty" for details. > This GDB was configured as "i686-pc-linux-gnu". > For bug reporting instructions, please see: > <http://bugs.gentoo.org/>... > Reading symbols from /usr/sbin/named...(no debugging symbols found)...done. > (gdb) run > Starting program: /usr/sbin/named -u named > [Thread debugging using libthread_db enabled] > > Program received signal SIGSEGV, Segmentation fault. > 0xb7c0b617 in engine_unlocked_finish () from /usr/lib/libcrypto.so.1.0.0 > (gdb) You should build bind with "-O1 -ggdb" in CFLAGS/CXXFLAGS and add "nostrip keepwork" to your FEATURES. e.g.: CFLAGS="-O1 -ggdb" CXXFLAGS="-O1 -ggdb" FEATURES="keepwork nostrip" emerge bind
(In reply to comment #6) > (In reply to comment #4) > > (In reply to comment #2) > > > And post your `emerge --info' in a comment. And perhaps recompile bind with > > > debug flags and obtain a gdb backtrace. > > > > > > > # gdb --args /usr/sbin/named -u named > > > > warning: Can not parse XML syscalls information; XML support was disabled at > > compile time. > > GNU gdb (Gentoo 7.0.1 p1) 7.0.1 > > Copyright (C) 2009 Free Software Foundation, Inc. > > License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> > > This is free software: you are free to change and redistribute it. > > There is NO WARRANTY, to the extent permitted by law. Type "show copying" > > and "show warranty" for details. > > This GDB was configured as "i686-pc-linux-gnu". > > For bug reporting instructions, please see: > > <http://bugs.gentoo.org/>... > > Reading symbols from /usr/sbin/named...(no debugging symbols found)...done. > > (gdb) run > > Starting program: /usr/sbin/named -u named > > [Thread debugging using libthread_db enabled] > > > > Program received signal SIGSEGV, Segmentation fault. > > 0xb7c0b617 in engine_unlocked_finish () from /usr/lib/libcrypto.so.1.0.0 > > (gdb) > > You should build bind with "-O1 -ggdb" in CFLAGS/CXXFLAGS and add "nostrip > keepwork" to your FEATURES. > > e.g.: CFLAGS="-O1 -ggdb" CXXFLAGS="-O1 -ggdb" FEATURES="keepwork nostrip" > emerge bind > Recompiled with given flags. output is nearly the same: Garmr ~ # gdb --args /usr/sbin/named -u named warning: Can not parse XML syscalls information; XML support was disabled at compile time. GNU gdb (Gentoo 7.0.1 p1) 7.0.1 Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i686-pc-linux-gnu". For bug reporting instructions, please see: <http://bugs.gentoo.org/>... Reading symbols from /usr/sbin/named...done. (gdb) run Starting program: /usr/sbin/named -u named [Thread debugging using libthread_db enabled] Program received signal SIGSEGV, Segmentation fault. 0xb7c0d627 in engine_unlocked_finish () from /usr/lib/libcrypto.so.1.0.0
(In reply to comment #5) > Please start named from CLI with the same options and additionally with "-g" > and if that doesn't show any errors try -d <debug-level>. > Same Output :( nothing new
(In reply to comment #8) > (In reply to comment #5) > > Please start named from CLI with the same options and additionally with "-g" > > and if that doesn't show any errors try -d <debug-level>. > > > > Same Output :( nothing new > Type "bt" :)
(In reply to comment #9) > (In reply to comment #8) > > (In reply to comment #5) > > > Please start named from CLI with the same options and additionally with "-g" > > > and if that doesn't show any errors try -d <debug-level>. > > > > > > > Same Output :( nothing new > > > > Type "bt" :) > Sorry Im new to this :( (gdb) run Starting program: /usr/sbin/named -u named [Thread debugging using libthread_db enabled] Program received signal SIGSEGV, Segmentation fault. 0xb7c0d627 in engine_unlocked_finish () from /usr/lib/libcrypto.so.1.0.0 (gdb) bt #0 0xb7c0d627 in engine_unlocked_finish () from /usr/lib/libcrypto.so.1.0.0 #1 0xb7c0d74a in ENGINE_finish () from /usr/lib/libcrypto.so.1.0.0 #2 0xb7c207b8 in EVP_DigestInit_ex () from /usr/lib/libcrypto.so.1.0.0 #3 0xb79832b9 in ssl3_init_finished_mac () from /usr/lib/libssl.so.0.9.8 #4 0xb7987b2d in ssl23_connect () from /usr/lib/libssl.so.0.9.8 #5 0xb799588c in SSL_connect () from /usr/lib/libssl.so.0.9.8 #6 0xb7af9726 in ?? () from /usr/lib/libldap-2.4.so.2 #7 0x080cd498 in ?? () #8 0x00013130 in ?? () #9 0xb7e0d3b0 in ?? () from /lib/libc.so.6 #10 0xb7b03ff4 in ?? () from /usr/lib/libldap-2.4.so.2 #11 0x080bf568 in ?? () #12 0xb7b03ff4 in ?? () from /usr/lib/libldap-2.4.so.2 #13 0xbfffe4e4 in ?? () #14 0xb7af7fcd in ?? () from /usr/lib/libldap-2.4.so.2 #15 0x080b7448 in ?? () #16 0x080cd498 in ?? () #17 0x00000014 in ?? () #18 0x080cd498 in ?? () #19 0x0000000d in ?? () #20 0x080a3620 in ?? () #21 0x00000000 in ?? ()
(In reply to comment #10) > (In reply to comment #9) > > (In reply to comment #8) > > > (In reply to comment #5) > > > > Please start named from CLI with the same options and additionally with "-g" > > > > and if that doesn't show any errors try -d <debug-level>. > > > > > > > > > > Same Output :( nothing new > > > > > > > Type "bt" :) > > > > Sorry Im new to this :( > > (gdb) run > Starting program: /usr/sbin/named -u named > [Thread debugging using libthread_db enabled] > > Program received signal SIGSEGV, Segmentation fault. > 0xb7c0d627 in engine_unlocked_finish () from /usr/lib/libcrypto.so.1.0.0 > (gdb) bt > #0 0xb7c0d627 in engine_unlocked_finish () from /usr/lib/libcrypto.so.1.0.0 > #1 0xb7c0d74a in ENGINE_finish () from /usr/lib/libcrypto.so.1.0.0 > #2 0xb7c207b8 in EVP_DigestInit_ex () from /usr/lib/libcrypto.so.1.0.0 > #3 0xb79832b9 in ssl3_init_finished_mac () from /usr/lib/libssl.so.0.9.8 > #4 0xb7987b2d in ssl23_connect () from /usr/lib/libssl.so.0.9.8 > #5 0xb799588c in SSL_connect () from /usr/lib/libssl.so.0.9.8 > #6 0xb7af9726 in ?? () from /usr/lib/libldap-2.4.so.2 > #7 0x080cd498 in ?? () > #8 0x00013130 in ?? () > #9 0xb7e0d3b0 in ?? () from /lib/libc.so.6 > #10 0xb7b03ff4 in ?? () from /usr/lib/libldap-2.4.so.2 > #11 0x080bf568 in ?? () > #12 0xb7b03ff4 in ?? () from /usr/lib/libldap-2.4.so.2 > #13 0xbfffe4e4 in ?? () > #14 0xb7af7fcd in ?? () from /usr/lib/libldap-2.4.so.2 > #15 0x080b7448 in ?? () > #16 0x080cd498 in ?? () > #17 0x00000014 in ?? () > #18 0x080cd498 in ?? () > #19 0x0000000d in ?? () > #20 0x080a3620 in ?? () > #21 0x00000000 in ?? () > Please also show me the output of "lddtree /usr/sbin/named". You're using two different openssl versions there which seems to be the reason for the segfault.
(In reply to comment #11) > (In reply to comment #10) > > (In reply to comment #9) > > > (In reply to comment #8) > > > > (In reply to comment #5) > > > > > Please start named from CLI with the same options and additionally with "-g" > > > > > and if that doesn't show any errors try -d <debug-level>. > > > > > > > > > > > > > Same Output :( nothing new > > > > > > > > > > Type "bt" :) > > > > > > > Sorry Im new to this :( > > > > (gdb) run > > Starting program: /usr/sbin/named -u named > > [Thread debugging using libthread_db enabled] > > > > Program received signal SIGSEGV, Segmentation fault. > > 0xb7c0d627 in engine_unlocked_finish () from /usr/lib/libcrypto.so.1.0.0 > > (gdb) bt > > #0 0xb7c0d627 in engine_unlocked_finish () from /usr/lib/libcrypto.so.1.0.0 > > #1 0xb7c0d74a in ENGINE_finish () from /usr/lib/libcrypto.so.1.0.0 > > #2 0xb7c207b8 in EVP_DigestInit_ex () from /usr/lib/libcrypto.so.1.0.0 > > #3 0xb79832b9 in ssl3_init_finished_mac () from /usr/lib/libssl.so.0.9.8 > > #4 0xb7987b2d in ssl23_connect () from /usr/lib/libssl.so.0.9.8 > > #5 0xb799588c in SSL_connect () from /usr/lib/libssl.so.0.9.8 > > #6 0xb7af9726 in ?? () from /usr/lib/libldap-2.4.so.2 > > #7 0x080cd498 in ?? () > > #8 0x00013130 in ?? () > > #9 0xb7e0d3b0 in ?? () from /lib/libc.so.6 > > #10 0xb7b03ff4 in ?? () from /usr/lib/libldap-2.4.so.2 > > #11 0x080bf568 in ?? () > > #12 0xb7b03ff4 in ?? () from /usr/lib/libldap-2.4.so.2 > > #13 0xbfffe4e4 in ?? () > > #14 0xb7af7fcd in ?? () from /usr/lib/libldap-2.4.so.2 > > #15 0x080b7448 in ?? () > > #16 0x080cd498 in ?? () > > #17 0x00000014 in ?? () > > #18 0x080cd498 in ?? () > > #19 0x0000000d in ?? () > > #20 0x080a3620 in ?? () > > #21 0x00000000 in ?? () > > > > Please also show me the output of "lddtree /usr/sbin/named". > You're using two different openssl versions there which seems to be the reason > for the segfault. > But there is only one Version installed. also try to rebuild openssl&bind Garmr ~ # equery b /usr/lib/libssl.so.0.9.8 [ Searching for file(s) /usr/lib/libssl.so.0.9.8 in *... ] dev-libs/openssl-1.0.0a-r3 (/usr/lib/libssl.so.0.9.8) Garmr ~ # equery b /usr/lib/libssl.so.1.0.0 [ Searching for file(s) /usr/lib/libssl.so.1.0.0 in *... ] dev-libs/openssl-1.0.0a-r3 (/usr/lib/libssl.so.1.0.0) Garmr ~ # lddtree /usr/sbin/named named => /usr/sbin/named (interpreter => /lib/ld-linux.so.2) liblwres.so.30 => /usr/lib/liblwres.so.30 libdns.so.38 => /usr/lib/libdns.so.38 libcrypto.so.1.0.0 => /usr/lib/libcrypto.so.1.0.0 libdl.so.2 => /lib/libdl.so.2 libz.so.1 => /lib/libz.so.1 libbind9.so.30 => /usr/lib/libbind9.so.30 libisccfg.so.30 => /usr/lib/libisccfg.so.30 libisccc.so.30 => /usr/lib/libisccc.so.30 libisc.so.36 => /usr/lib/libisc.so.36 libpthread.so.0 => /lib/libpthread.so.0 libc.so.6 => /lib/libc.so.6 Garmr ~ # ls -la /usr/lib/libssl.so 0 lrwxrwxrwx 1 root root 15 4. Nov 17:53 /usr/lib/libssl.so -> libssl.so.1.0.0 Garmr ~ # ls -la /usr/lib/libcrypto.so 0 lrwxrwxrwx 1 root root 18 4. Nov 17:53 /usr/lib/libcrypto.so -> libcrypto.so.1.0.0
Run revdep-rebuild and remove (be careful) the old ssl libs later.
(In reply to comment #13) > Run revdep-rebuild and remove (be careful) the old ssl libs later. > I dont know how or why but a rebuild of openldap solved the problem. Thanks for help.
