[krbdev.mit.edu #8614] Error with SAP NW 7.51 krb5int_key_register: Assertion `destructors_set[keynum] == 0' failed

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

[krbdev.mit.edu #8614] Error with SAP NW 7.51 krb5int_key_register: Assertion `destructors_set[keynum] == 0' failed

Greg Hudson via RT
I believe this happens when two different versions of
libgssapi_krb5.so are loaded into the same process (in this case,
probably the one under /usr/lib and the one in /usr/local/lib), but
they both wind up using the same instance of libkrb5support.so.  The
initializer runs in both copies of libgssapi_krb5, and tries to re-
register the same thread-specific data key, triggering the assertion
failure.

Debugging these kinds of problems can be difficult, as it requires
tracking down what is loading each version of libgssapi_krb5.so.  In
this case it seems like SAP is loading the version from
/usr/local/lib, but I don't know what is loading the one from
/usr/lib.

(I'm also a little confused as to how a process could manage to load
two different versions of libgssapi_krb5.so as we haven't changed its
soname since the 1.2 release.)
_______________________________________________
krb5-bugs mailing list
[hidden email]
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
Reply | Threaded
Open this post in threaded view
|

Re: [krbdev.mit.edu #8614] Error with SAP NW 7.51 krb5int_key_register: Assertion `destructors_set[keynum] == 0' failed

Greg Hudson via RT
Hello, Dmitri!Yes, problem is an inconsistent version lib in  /usr/lib64/ and /usr/local/lib/
ls -la /usr/lib64/libkrb5support.so.0.1
-rwxr-xr-x. 1 root root 58728 Apr 28 22:49 /usr/lib64/libkrb5support.so.0.1ls -la /usr/local/lib/libkrb5support.so.0.1
-rw-r--r--. 1 root root 181632 Sep 21 09:49 /usr/local/lib/libkrb5support.so.0.1
 ls -la /usr/lib64/libgssapi_krb5.so.2.2
-rwxr-xr-x. 1 root root 320776 Apr 28 22:49 /usr/lib64/libgssapi_krb5.so.2.2
 ls -la /usr/local/lib/libgssapi_krb5.so.2.2
-rw-r--r--. 1 root root 1929168 Sep 21 09:49 /usr/local/lib/libgssapi_krb5.so.2.2
I try set profile parameter SAP APP to:snc/gssapi_lib = /usr/lib64/libgssapi_krb5.so.2
and SAP APP start with SSO
but previous version 1.14.1 we set this parameter to:snc/gssapi_lib = /usr/local/lib/libgssapi_krb5.so
I'm not sure now if the correct library is working.


 

    On Thursday, September 21, 2017 6:03 PM, Dmitri Matveev via RT <[hidden email]> wrote:
 

  Hello,We use MIT Kerberos krb5-1.15.1 via SSO for SAP ABAP authentication user. OS version RHEL 7.3 with last kernel patchLinux sapfs2ci 3.10.0-693.2.2.el7.x86_64 #1 SMP Sat Sep 9 03:55:24 EDT 2017 x86_64 x86_64 x86_64 GNU/Linux After update krb5* to last version:krb5-libs.x86_64                                                                                                  1.15.1-8.el7                                                                                      
krb5-workstation.x86_64                                                                                           1.15.1-8.el7       
Ticket is received from AD an work properly: sapfs2ci:fs2adm 65>  /usr/bin/kinit -k -V SAP/[hidden email]
Using default cache: /tmp/krb5cc_1039
Using principal: SAP/[hidden email]
Authenticated to Kerberos v5
sapfs2ci:fs2adm 66> /usr/bin/klist -f
Ticket cache: FILE:/tmp/krb5cc_1039
Default principal: SAP/[hidden email] starting       Expires              Service principal
09/21/2017 09:27:51  09/21/2017 19:27:51  krbtgt/[hidden email]
        renew until 09/22/2017 09:27:51, Flags: RIA

We have problem with start SAP APP server (used last SAP kernel 749 Linux GNU SLES-11 x86_64 cc4.8.5 use-pr170902 path 315)In logs stderr0 (SAP APP)^
dw.sapFS2_D00: threads.c:357: krb5int_key_register: Assertion `destructors_set[keynum] == 0' failed
In log main SAP process disp+work:
N  SncInit(): found  snc/gssapi_lib=/usr/local/lib/libgssapi_krb5.so
N    File "/usr/local/lib/libgssapi_krb5.so" dynamically loaded as GSS-API v2 library.
M  si_code = -6
M  Sending process ID = 28307
M  Real user ID of sending process = 1039
M  ------------------ C-STACK ----------------------
dw.sapFS2_D00[S](LinStackBacktrace+0xa9)[0x654518]
dw.sapFS2_D00[S](LinStack+0x3e)[0x657484]
dw.sapFS2_D00[S](CTrcStack2+0x4b)[0x6532dd]
dw.sapFS2_D00[S](SigIGenAction+0x730)[0x2553940]
<signal handler called> [0x7f5689fee5e0]
libc.so.6[S](__GI_raise+0x37)[0x7f5689c511f7]
libc.so.6[S](__GI_abort+0x148)[0x7f5689c528e8]
libc.so.6[S](__assert_fail_base+0x126)[0x7f5689c4a266]
libc.so.6[S](__GI___assert_fail+0x42)[0x7f5689c4a312]
libkrb5support.so.0[S](krb5int_key_register+0xf4)[0x7f53a7478694]
libgssapi_krb5.so[gssapi_krb5.c:1091](gss_krb5int_lib_init+0x2a)[0x7f567eece41a]
libgssapi_krb5.so[g_initialize.c:120](gssint_mechglue_init__aux+0x1f)[0x7f567eebec8f]
libpthread.so.0[S](__GI___pthread_once+0x50)[0x7f5689febe20]
libgssapi_krb5.so[g_initialize.c:156](gssint_mechglue_initialize_library+0x17)[0x7f567eec3297]
libgssapi_krb5.so[g_initialize.c:277](gss_indicate_mechs+0x4d)[0x7f567eec331d]
dw.sapFS2_D00[S](SncPDLInit+0x49a)[0x1b9dee6]
dw.sapFS2_D00[S](SncInit+0xa5c)[0x1ba0012]
dw.sapFS2_D00[S](SncInitU+0x49)[0x1ba1168]
dw.sapFS2_D00[S](ThSncInit(unsigned char)+0x8b)[0x51fce3]
dw.sapFS2_D00[S](ThInit()+0x1794)[0x4eebf3]
dw.sapFS2_D00[S](ThStart()+0x35c)[0x4ef6c6]
dw.sapFS2_D00[S](DpMain+0x39b)[0x229311b]
libc.so.6[S](__libc_start_main+0xf5)[0x7f5689c3dc05]
M  -------------------------------------------------
M  caught SIGABRT (6)
Downgrade version krb5-libs.x86_64 to 1.14.1 not helpedDowngrade version SAP KERNEL not helpedDowngrade version RHEL KERNEL not helped
We have many SAP system worked on krb5-1.14.1 for a SAP SSO
_______________________________________________
krb5-bugs mailing list
[hidden email]
https://mailman.mit.edu/mailman/listinfo/krb5-bugs


   

_______________________________________________
krb5-bugs mailing list
[hidden email]
https://mailman.mit.edu/mailman/listinfo/krb5-bugs