[Pkg-openldap-devel] Bug#645810: slapd dies with SIGABORT - GNUTLS problem

[Simon]

On Fri, 21 Oct 2011 19:38:17 -0700, Steve Langasek <vorlon at debian.org> said:

> On Fri, Oct 21, 2011 at 08:43:49PM -0400, Simon L'nu wrote:
> > > slapd runs fine here, including on i386, when I test it.  It also
> > > passed its test suite when built on the buildds.  This may be a gnutls
> > > problem, but it's not as simple as "running slapd with no options
> > > whatever".  In particular, your list of mapped modules includes a large
> > > number of slapd plugins which are not loaded by default.  So to debug
> > > this, we're going to need to see a slapd config that can be used to
> > > reproduce it.
> 
> > i'm happy it runs for you :).
> 
> Well, that means I can't help you fix the problem because I can't reproduce
> it.  Can you please send us a slapd configuration that we could use to
> reproduce the problem?
> 
> > > If anything, I suspect the recent patch to change ltdl behavior to be
> > > responsible.  This was meant to fix bug #327585, but it affects the
> > > loading of all modules, not just back_perl.  Could you try rebuilding
> > > slapd with
> > > debian/patches/switch-to-lt_dlopenadvise-to-get-RTLD_GLOBAL-set.diff
> > > commented out of debian/patches/series, to see if that fixes the
> > > problem for you?
> 
> > i'll do it soon.
> 
> Ok, thanks.  We really don't want to back that patch out though if we can
> avoid it, so a reproducible test case is still needed.
> 
> -- 
> Steve Langasek                   Give me a lever long enough and a Free OS
> Debian Developer                   to set it on, and I can move the world.
> Ubuntu Developer                                    http://www.debian.org/
> slangasek at ubuntu.com                                     vorlon at debian.org


bingo. i knew it. same problem i had in previous debian versions. i can't set:

olcTLSCipherSuite: TLSv1

in cn=config.ldif otherwise it aborts. i don't think there's anything like it
for GNUTLS. BTW, it doesn't matter what i set that to, it'll abort badly. it
should instead go, "slapd can't use that setting, exiting until you fix it",
or something like that. SIGABRT isn't exactly helpful ;p.

thank you

-- 
"The state can't give you free speech, and the state can't take it away.
You're born with it, like your eyes, like your ears. Freedom is something
you assume, then you wait for someone to try to take it away. The degree
to which you resist is the degree to which you are free..."
  -- Utah Phillips