lf_advlockasync panic [Was: pcpu.h kernel crash with 7.2]

2009-09-18 Thread Kostik Belousov
On Fri, Sep 18, 2009 at 10:43:03AM +1000, Aristedes Maniatis wrote:
 This is a FreeBSD 7.2 machine in production. I'm not an expert at debugging 
 kernel problems, but I've still got the vmcore if there is anything else I 
 should run on it to extract more information.
It is believed that the problem is fixed in RELENG_7 branch.
If the issue is reproducable, it would worth the efforts to upgrade
at least the kernel to latest RELENG_7 and retest.

 
 Thanks
 
 Ari Maniatis
 
 
 # uname -a
 FreeBSD dash.internal 7.2-RELEASE-p2 FreeBSD 7.2-RELEASE-p2 #0: Wed Jun 24 
 00:14:35 UTC 2009 
 r...@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC  amd64
 
 
 #kgdb /boot/kernel/kernel /var/crash/vmcore.3
 GNU gdb 6.1.1 [FreeBSD]
 Copyright 2004 Free Software Foundation, Inc.
 GDB is free software, covered by the GNU General Public License, and you are
 welcome to change it and/or distribute copies of it under certain 
 conditions.
 Type show copying to see the conditions.
 There is absolutely no warranty for GDB.  Type show warranty for details.
 This GDB was configured as amd64-marcel-freebsd...
 
 Unread portion of the kernel message buffer:
 
 
 Fatal trap 12: page fault while in kernel mode
 cpuid = 4; apic id = 04
 fault virtual address = 0x11
 fault code= supervisor read data, page not present
 instruction pointer   = 0x8:0x804fbec9
 stack pointer = 0x10:0x7b6a2830
 frame pointer = 0x10:0x1
 code segment  = base 0x0, limit 0xf, type 0x1b
   = DPL 0, pres 1, long 1, def32 0, gran 1
 processor eflags  = interrupt enabled, resume, IOPL = 0
 current process   = 69329 (httpd)
 trap number   = 12
 panic: page fault
 cpuid = 4
 Uptime: 34d3h21m46s
 Physical memory: 24561 MB
 Dumping 5146 MB: 5131 5115 5099 5083 5067 5051 5035 5019 5003 4987 4971 
 4955 4939 4923 4907 4891 4875 4859 4843 4827 4811 4795 4779 4763 4747 4731 
 4715 4699 4683 4667 4651 4635 4619 4603 4587 4571 4555 4539 4523 4507 4491 
 4475 4459 4443 4427 4411 4395 4379 4363 4347 4331 4315 4299 4283 4267 4251 
 4235 4219 4203 4187 4171 4155 4139 4123 4107 4091 4075 4059 4043 4027 4011 
 3995 3979 3963 3947 3931 3915 3899 3883 3867 3851 3835 3819 3803 3787 3771 
 3755 3739 3723 3707 3691 3675 3659 3643 3627 3611 3595 3579 3563 3547 3531 
 3515 3499 3483 3467 3451 3435 3419 3403 3387 3371 3355 3339 3323 3307 3291 
 3275 3259 3243 3227 3211 3195 3179 3163 3147 3131 3115 3099 3083 3067 3051 
 3035 3019 3003 2987 2971 2955 2939 2923 2907 2891 2875 2859 2843 2827 2811 
 2795 2779 2763 2747 2731 2715 2699 2683 2667 2651 2635 2619 2603 2587 2571 
 2555 2539 2523 2507 2491 2475 2459 2443 2427 2411 2395 2379 2363 2347 2331 
 2315 2299 2283 2267 2251 2235 2219 2203 2187 2171 2155 2139 2123 2107 2091 
 2075 2059 2043 202
 7 2011 1995 1979 1963 1947 1931 1915 1899 1883 1867 1851 1835 1819 1803 
 1787 1771 1755 1739 1723 1707 1691 1675 1659 1643 1627 1611 1595 1579 1563 
 1547 1531 1515 1499 1483 1467 1451 1435 1419 1403 1387 1371 1355 1339 1323 
 1307 1291 1275 1259 1243 1227 1211 1195 1179 1163 1147 1131 1115 1099 1083 
 1067 1051 1035 1019 1003 987 971 955 939 923 907 891 875 859 843 827 811 
 795 779 763 747 731 715 699 683 667 651 635 619 603 587 571 555 539 523 507 
 491 475 459 443 427 411 395 379 363 347 331 315 299 283 267 251 235 219 203 
 187 171 155 139 123 107 91 75 59 43 27 11
 
 Reading symbols from /boot/kernel/zfs.ko...Reading symbols from 
 /bootdir/boot/kernel/zfs.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/zfs.ko
 Reading symbols from /boot/kernel/opensolaris.ko...Reading symbols from 
 /bootdir/boot/kernel/opensolaris.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/opensolaris.ko
 Reading symbols from /boot/kernel/accf_http.ko...Reading symbols from 
 /bootdir/boot/kernel/accf_http.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/accf_http.ko
 Reading symbols from /boot/kernel/ipmi.ko...Reading symbols from 
 /bootdir/boot/kernel/ipmi.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ipmi.ko
 Reading symbols from /boot/kernel/smbus.ko...Reading symbols from 
 /bootdir/boot/kernel/smbus.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/smbus.ko
 Reading symbols from /boot/kernel/pflog.ko...Reading symbols from 
 /bootdir/boot/kernel/pflog.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/pflog.ko
 Reading symbols from /boot/kernel/pf.ko...Reading symbols from 
 /bootdir/boot/kernel/pf.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/pf.ko
 #0  doadump () at pcpu.h:195
 195   pcpu.h: No such file or directory.
   in pcpu.h
 
 
 
 
 (kgdb) bt
 #0  doadump () at pcpu.h:195
 #1  0x0004 in ?? ()
 #2  0x8050df79 in boot (howto=260) at 
 /usr/src/sys/kern/kern_shutdown.c:418
 #3  0x8050e382 in panic (fmt=0x104 Address 0x104 out of bounds) 
 at /usr/src/sys/kern/kern_shutdown.c:574
 #4  0x807d2253 in trap_fatal 

SASL problems with spnego, heimdal, AND openldap on 8.0-BETA4

2009-09-18 Thread George Mamalakis

Dear all,

I changed the subject of my email, due to today's results on my 
configurations, regarding SASL authentication on 
openldap-sasl-server-2.4.18_1, with cyrus-sasl-2.1.23, and fbsd's 
8-BETA4 heimdal. When I try to ldapsearch from another machine to the 
openldap server, slapd hangs!


The client goes like that:
(
client-host$ ldapsearch -d 255 -H ldap://ldap.example.com -b 
'dc=example,dc=com'


ldap_url_parse_ext(ldap://ldap.example.com)
ldap_create
ldap_url_parse_ext(ldap://ldap.example.com:389/??base)
ldap_sasl_interactive_bind_s: user selected: GSSAPI
ldap_int_sasl_bind: GSSAPI
ldap_new_connection 1 1 0
ldap_int_open_connection
ldap_connect_to_host: TCP ldap.example.com:389
ldap_new_socket: 3
ldap_prepare_socket: 3
ldap_connect_to_host: Trying 1.2.3.4:389
ldap_pvt_connect: fd: 3 tm: -1 async: 0
ldap_int_sasl_open: host=ldap.example.com
SASL/GSSAPI authentication started
ldap_sasl_bind_s
ldap_sasl_bind
ldap_send_initial_request
ldap_send_server_request
ber_scanf fmt ({it) ber:
ber_dump: buf=0x34142000 ptr=0x34142000 end=0x341422b4 len=692
 :  30 82 02 b0 02 01 01 60  82 02 a9 02 01 03 04 00   
0..` 
 0010:  a3 82 02 a0 04 06 47 53  53 41 50 49 04 82 02 94   
..GSSAPI 
 0020:  60 82 02 90 06 09 2a 86  48 86 f7 12 01 02 02 01   
`.*.H... 
 0030:  00 6e 82 02 7f 30 82 02  7b a0 03 02 01 05 a1 03   
.n...0..{... 
. packet infrormation.


ber_scanf fmt ({i) ber:
ber_dump: buf=0x34142000 ptr=0x34142007 end=0x341422b4 len=685
:  60 82 02 a9 02 01 03 04  00 a3 82 02 a0 04 06 47   
`..G 
 0010:  53 53 41 50 49 04 82 02  94 60 82 02 90 06 09 2a   
SSAPI`.* 
 0020:  86 48 86 f7 12 01 02 02  01 00 6e 82 02 7f 30 82   
.Hn...0. 
. more packet infrormation.


ber_flush2: 692 bytes to sd 3
 :  30 82 02 b0 02 01 01 60  82 02 a9 02 01 03 04 00   
0..` 
 0010:  a3 82 02 a0 04 06 47 53  53 41 50 49 04 82 02 94   
..GSSAPI 
 0020:  60 82 02 90 06 09 2a 86  48 86 f7 12 01 02 02 01   
`.*.H... 
. even more packet infrormation.


ldap_write: want=692, written=692
 :  30 82 02 b0 02 01 01 60  82 02 a9 02 01 03 04 00   
0..` 
 0010:  a3 82 02 a0 04 06 47 53  53 41 50 49 04 82 02 94   
..GSSAPI 
. even even more packet infrormation


ldap_result ld 0x34124040 msgid 1
wait4msg ld 0x34124040 msgid 1 (infinite timeout)
wait4msg continue ld 0x34124040 msgid 1 all 1
** ld 0x34124040 Connections:
* host: ldap.example.com  port: 389  (default)
 refcnt: 2  status: Connected
 last used: Fri Sep 18 11:02:10 2009


** ld 0x34124040 Outstanding Requests:
* msgid 1,  origid 1, status InProgress
  outstanding referrals 0, parent count 0
 ld 0x34124040 request count 1 (abandoned 0)
** ld 0x34124040 Response Queue:
  Empty
 ld 0x34124040 response count 0
ldap_chkResponseList ld 0x34124040 msgid 1 all 1
ldap_chkResponseList returns ld 0x34124040 NULL
ldap_int_select
read1msg: ld 0x34124040 msgid 1 all 1
ber_get_next
ldap_read: want=8, got=0

ber_get_next failed.
ldap_free_connection 1 0
ldap_free_connection: actually freed
ldap_err2string
ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1)

)

And this is where it loses connection. From the server's point of view, 
the only thing I get from the logs (loglevel args config stats) is:


Sep 18 11:02:08 ldap slapd[2257]: conn=1 fd=13 ACCEPT from 
IP=1.2.3.5:50345 (IP=0.0.0.0:389)

Sep 18 11:02:08 ldap slapd[2257]: connection_get(13)
Sep 18 11:02:08 ldap slapd[2257]: conn=1 op=0 BIND dn= method=163
Sep 18 11:02:08 ldap slapd[2257]: == sasl_bind: dn= mech=GSSAPI 
datalen=660


And after that the server is down..

I don't know what to do, I'll try to update heimdal to version 1.2.1, as 
John Marshall advised me in his last email..


If anyone knows anything more, I would be delighted if he could share it 
on this list.


Thanx again for  reading.

--
George Mamalakis

IT Officer
Electrical and Computer Engineer (Aristotle Un. of Thessaloniki),
MSc (Imperial College of London)

Department of Electrical and Computer Engineering
Faculty of Engineering
Aristotle University of Thessaloniki

phone number : +30 (2310) 994379

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to freebsd-stable-unsubscr...@freebsd.org


Re: SASL problems with spnego on 8.0-BETA4

2009-09-18 Thread George Mamalakis

John Marshall wrote:

On Thu, 17 Sep 2009, 21:28 +0300, George Mamalakis wrote:
  

Dear all,

I am trying to setup ldap with heimdal on my fbsd 8.0-BETA4 and when I 
run ldapsearch to see if I can authenticate via GSSAPI I keep getting 
the following error:


[r...@ldap root]# ldapsearch  -H ldap://ldap.example.com/; -b 
dc=example,dc=com

SASL/GSSAPI authentication started
dlopen: /usr/lib/libgssapi_spnego.so.10: Undefined symbol 
GSS_C_NT_HOSTBASED_SERVICE

ldap_sasl_interactive_bind_s: Local error (-2)


in ldap.conf (loglevel args stats) I am getting:

Sep 17 21:24:46 ldap slapd[44607]: conn=11 fd=13 ACCEPT from 
IP=192.168.35.10:32598 (IP=0.0.0.0:389)

Sep 17 21:24:46 ldap slapd[44607]: connection_get(13)
Sep 17 21:24:46 ldap slapd[44607]: conn=11 fd=13 closed (connection lost)

The ports I installed are:

cyrus-sasl-2.1.23
openldap-sasl-client-2.4.18
openldap-sasl-server-2.4.18_1

I cannot resolve this issue, so if anyone knows anything, I would be 
grateful if I could have a hint.


Thank you all for your time in advance.



I don't remember if the symptoms I saw were identical, but I couldn't
use GSSAPI to authenticate to OpenLDAP on 8.0-BETA2.  I solved my
problem by installing a newer Heimdal as a port and then rebuilding
SASL2 against the newer Heimdal.

NB. To build security/cyrus-sasl2 against the Heimdal port, I added the
following line to my /usr/local/etc/ports.conf (see:
ports-mgmt/portconf)

  security/cyrus-sasl2: HEIMDAL_HOME=/usr/local

FreeBSD 8.0 includes Heimdal 1.1.0 in the base system.  The Heimdal port
is older (1.0.1).  The heimdal-1.2.1 port patch I used was submitted to
GNATS a couple of hours ago.  No response from GNATS yet but it should
be available there sometime soon.

  

John,

thank you for your answer, first of all. Now to your email:

Could you please send me the location from where you downloaded the 
heimdal-1.2.1 ? I would really appreciate it if you could send it to me 
to test it on my machine so as to proceed with my configuration. Thank 
you for your time in advance.


--
George Mamalakis

IT Officer
Electrical and Computer Engineer (Aristotle Un. of Thessaloniki),
MSc (Imperial College of London)

Department of Electrical and Computer Engineering
Faculty of Engineering
Aristotle University of Thessaloniki

phone number : +30 (2310) 994379

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to freebsd-stable-unsubscr...@freebsd.org


Re: 7.2-release/amd64: panic, spin lock held too long

2009-09-18 Thread C. C. Tang

Attilio Rao wrote:

2009/9/17 C. C. Tang hiyo...@gmail.com:

Dan, is that machine equipped with Hyperthreading?

Attilio

Yes. It's an Intel Atom 330, which is a dualcore CPU with HT (4 cores
visible in top as a result)

Yes, mine is also Atom 330.

I cannot test the patch because my machine is also in production now. 
But I

have tested it with hyperthreading.
powerd with HyperThreading - spin lock hold too long
powerd without HyperThreading - no problem
no powerd with/without HyperThreading - no problem


But these are with the last patch I posted in?
(specifically, for 7.2:
http://www.freebsd.org/~attilio/sched_ule.diff
)

So with the patch in, powerd and hyperthreading on you still get a 
deadlock?


Attilio


I have patched the sched_ule.c and did a make buildkernel  make 
installkernel (is buildworld and installworld necessary?), rebooted and 
the machine is running now.

I will post here again if there is any update.

Thanks,
C.C.
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to freebsd-stable-unsubscr...@freebsd.org


Re: SASL problems with spnego on 8.0-BETA4

2009-09-18 Thread Rick Macklem



On Fri, 18 Sep 2009, John Marshall wrote:


On Thu, 17 Sep 2009, 21:28 +0300, George Mamalakis wrote:

Dear all,

I am trying to setup ldap with heimdal on my fbsd 8.0-BETA4 and when I
run ldapsearch to see if I can authenticate via GSSAPI I keep getting
the following error:

[r...@ldap root]# ldapsearch  -H ldap://ldap.example.com/; -b
dc=example,dc=com
SASL/GSSAPI authentication started
dlopen: /usr/lib/libgssapi_spnego.so.10: Undefined symbol
GSS_C_NT_HOSTBASED_SERVICE
ldap_sasl_interactive_bind_s: Local error (-2)


GSS_C_NT_HOSTBASED_SERVICE is defined in gss_names.o in libgssapi.

I don't know diddly about ldap (like a lot of the stuff I've been
posting w.r.t. lately, it seems:-), but maybe an extra -lgssapi
at the end of the libraries list for the Makefile, might help?
(ie. I'm guessing that maybe gss_names.o doesn't get pulled out
of libgssapi, since nothing that comes before it uses any of the
globals in it and -lgssapi_spnego is listed after it.)

One difference between the vanilla Heimdal and the one in FreeBSD
is where the globals live in the libraries.

Just a shot in the dark, rick

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to freebsd-stable-unsubscr...@freebsd.org


Problems with 8.0 Beta 4

2009-09-18 Thread Doug Hardie

I have switched to working hardware.  Sure makes a difference ;-)

Now I am down to a couple issues:

1.  When booting I first get the following:

F1: FreeBSD
F5: Drive 0

F6: PXE
Boot: F1

At that point it just sits and starts adding #s at the end of the Boot  
statement.  If I press F5 (none of the other F keys do anything), then  
I get another Boot:  F1 line and its sits for a moment and then boots  
from the disk.  I used the standard install with the FreeBSD Boot  
Loader.


After that the system comes up and runs fine.  I am only using it for  
network testing so haven't placed any great load on it but everything  
I have tried works fine - until I try and shut it down.  Then I get a  
panic at the very end.  It also does not shut off the power.  I have a  
console log of the entire boot/shutdown process.  The only user  
command I entered was shutdown -p now.


/boot.config: -Dh
Consoles: internal video/keyboard  serial port
BIOS drive A: is disk0
BIOS drive C: is disk1
BIOS 638kB/64512kB available memory

FreeBSD/i386 bootstrap loader, Revision 1.1
(r...@almeida.cse.buffalo.edu, Sun Sep  6 03:42:03 UTC 2009)
Loading /boot/defaults/loader.conf
/boot/kernel/kernel text=0x8b2774 data=0xde874+0x1feb04 syms= 
[0x4+0x9c300+0

x4+0xd55bb]
|


 ZD?
 3 3
 3 3  __
 3 3 |  | __ ___  ___
 3  Welcome to FreeBSD!3 | |__ | '__/ _ \/ _ \
 3 3 |  __|| | |  __/  __/
 3 3 | |   | | |||
 3  1. Boot FreeBSD [default]  3 |_|   |_|  \___|\___|
 3  2. Boot FreeBSD with ACPI enabled  3     _ _
 3  3. Boot FreeBSD in Safe Mode   3 |  _ \ / |  __ \
 3  4. Boot FreeBSD in single user mode3 | |_) | (___ | |  | |
 3  5. Boot FreeBSD with verbose logging   3 |  _  \___ \| |  | |
 3  6. Escape to loader prompt 3 | |_) |) | |__| |
 3  7. Reboot  3 | |  |  |
 3 3 |/|_/|_/
 3 3
 3 3
 3 3
 3  Select option, [Enter] for default 3
 3  or [Space] to pause timer  7   3
 @DY


GDB: no debug ports present
KDB: debugger backends: ddb
KDB: current backend: ddb
Copyright (c) 1992-2009 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights  
reserved.

FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 8.0-BETA4 #0: Sun Sep  6 05:51:03 UTC 2009
r...@almeida.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC
WARNING: WITNESS option enabled, expect reduced performance.
Timecounter i8254 frequency 1193182 Hz quality 0
CPU: Pentium II/Pentium II Xeon/Celeron (233.29-MHz 686-class CPU)
  Origin = GenuineIntel  Id = 0x634  Stepping = 4
   
Features 
=0x80f9ffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMO

V,MMX
real memory  = 67108864 (64 MB)
avail memory = 46567424 (44 MB)
kbd1 at kbdmux0
ACPI Error: A valid RSDP was not found 20090521 tbxfroot-309
ACPI: Table initialisation failed: AE_NOT_FOUND
ACPI: Try disabling either ACPI or apic support.
pcib0: Intel 82443LX (440 LX) host to PCI bridge pcibus 0 on  
motherboard

pir0: PCI Interrupt Routing Table: 7 Entries on motherboard
pci0: PCI bus on pcib0
agp0: Intel 82443LX (440 LX) host to PCI bridge on hostb0
pcib1: PCI-PCI bridge at device 1.0 on pci0
pci1: PCI bus on pcib1
$PIR: ROUTE_INTERRUPT failed.
vgapci0: VGA-compatible display mem 0xfedc-0xfedd, 
0xfd80-0xfd

ff,0xfe00-0xfe7f irq 9 at device 0.0 on pci1
isab0: PCI-ISA bridge at device 7.0 on pci0
isa0: ISA bus on isab0
atapci0: Intel PIIX4 UDMA33 controller port  
0x1f0-0x1f7,0x3f6,0x170-0x177

,0x376,0xfcf0-0xfcff at device 7.1 on pci0
ata0: ATA channel 0 on atapci0
ata0: [ITHREAD]
ata1: ATA channel 1 on atapci0
ata1: [ITHREAD]
uhci0: Intel 82371AB/EB (PIIX4) USB controller port 0xfcc0-0xfcdf  
irq 11

at device 7.2 on pci0
uhci0: [ITHREAD]
usbus0: Intel 82371AB/EB (PIIX4) USB controller on uhci0
piix0: PIIX Timecounter port 0x7000-0x700f at device 7.3 on pci0
Timecounter PIIX frequency 3579545 Hz quality 0
xl0: 3Com 3c905-TX Fast Etherlink XL port 0xfc40-0xfc7f irq 10 at  
device

13.0 on pci0
miibus0: MII bus on xl0
nsphy0: DP83840 10/100 media interface PHY 24 on miibus0
nsphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
xl0: Ethernet address: 00:10:4b:2c:bb:09
xl0: [ITHREAD]
cpu0 on motherboard
pmtimer0 on isa0
unknown: PNP0c02 can't assign resources (port)
unknown: PNP0c02 can't assign resources (memory)
unknown: System Memory can't 

Re: SASL problems with spnego on 8.0-BETA4

2009-09-18 Thread Rick Macklem



On Fri, 18 Sep 2009, John Marshall wrote:


On Thu, 17 Sep 2009, 21:28 +0300, George Mamalakis wrote:

Dear all,

I am trying to setup ldap with heimdal on my fbsd 8.0-BETA4 and when I
run ldapsearch to see if I can authenticate via GSSAPI I keep getting
the following error:

[r...@ldap root]# ldapsearch  -H ldap://ldap.example.com/; -b
dc=example,dc=com
SASL/GSSAPI authentication started
dlopen: /usr/lib/libgssapi_spnego.so.10: Undefined symbol
GSS_C_NT_HOSTBASED_SERVICE
ldap_sasl_interactive_bind_s: Local error (-2)


I don't know if you guys feel like experimenting, but here's what little
I know about the heimdal/gssapi setup.

When cyrus-sasl2 builds, it uses the little shell script
/usr/bin/krb5-config with the args. --libs gssapi to get the list of
libraries to link against. This doesn't return -lgssapi_spnego in the
list. (The list can be changed by editting line #96 of 
/usr/bin/krb5-config.)


Nothing seems to link against -lgssapi_spnego, so it's a mystery to
me how it ends up using it? (Maybe others with knowledge on how FreeBSD
loads libraries can explain it. The library is listed in /etc/gss/mech.)

GSS_C_NT_HOSTBASED_SERVICE is defined in the file gss_names.o in 
-lgssapi, which is at the beginning of the list of libraries 
returned by krb5-config --libs gssapi.


I'm hoping that someone who understands how libraries get loaded can
solve the puzzle, but barring that, you could try added -lgssapi_spnego
to line #96 of /usr/bin/krb5-config in front of -lgssapi and see if that
gets things to load properly?

Not much help, but I don't know how to test this stuff, rick

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to freebsd-stable-unsubscr...@freebsd.org


Re: SASL problems with spnego on 8.0-BETA4

2009-09-18 Thread Sam Leffler
Rick Macklem wrote:
 
 
 On Fri, 18 Sep 2009, John Marshall wrote:
 
 On Thu, 17 Sep 2009, 21:28 +0300, George Mamalakis wrote:
 Dear all,

 I am trying to setup ldap with heimdal on my fbsd 8.0-BETA4 and when I
 run ldapsearch to see if I can authenticate via GSSAPI I keep getting
 the following error:

 [r...@ldap root]# ldapsearch  -H ldap://ldap.example.com/; -b
 dc=example,dc=com
 SASL/GSSAPI authentication started
 dlopen: /usr/lib/libgssapi_spnego.so.10: Undefined symbol
 GSS_C_NT_HOSTBASED_SERVICE
 ldap_sasl_interactive_bind_s: Local error (-2)

 I don't know if you guys feel like experimenting, but here's what little
 I know about the heimdal/gssapi setup.
 
 When cyrus-sasl2 builds, it uses the little shell script
 /usr/bin/krb5-config with the args. --libs gssapi to get the list of
 libraries to link against. This doesn't return -lgssapi_spnego in the
 list. (The list can be changed by editting line #96 of
 /usr/bin/krb5-config.)
 
 Nothing seems to link against -lgssapi_spnego, so it's a mystery to
 me how it ends up using it? (Maybe others with knowledge on how FreeBSD
 loads libraries can explain it. The library is listed in /etc/gss/mech.)
 
 GSS_C_NT_HOSTBASED_SERVICE is defined in the file gss_names.o in
 -lgssapi, which is at the beginning of the list of libraries returned
 by krb5-config --libs gssapi.
 
 I'm hoping that someone who understands how libraries get loaded can
 solve the puzzle, but barring that, you could try added -lgssapi_spnego
 to line #96 of /usr/bin/krb5-config in front of -lgssapi and see if that
 gets things to load properly?
 
 Not much help, but I don't know how to test this stuff, rick

FWIW I hit the same problem (I think) with cyrus imap and saslauthd.  I
am running HEAD and tried building w/ and w/o kerberos enabled but
cyradm aborts on startup complaining about the missing symbol.  I
started digging because I couldn't get cyrus imap to authenticate users.
 Feels like one or more of these ports are busted.

Sam
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to freebsd-stable-unsubscr...@freebsd.org


Re: SASL problems with spnego on 8.0-BETA4

2009-09-18 Thread John Marshall
On Fri, 18 Sep 2009, 14:19 +0300, George Mamalakis wrote:
 Could you please send me the location from where you downloaded the 
 heimdal-1.2.1 ? I would really appreciate it if you could send it to me 
 to test it on my machine so as to proceed with my configuration. Thank 
 you for your time in advance.

The security/heimdal port patch is now in GNATS.  Just apply the patch
to the security/heimdal port in your ports tree and install the port.

http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/138929

But I think Rick Macklem is onto something with his /usr/bin/krb5-config
idea and suggest that you try that first - before introducing a Heimdal
port to your system.

-- 
John Marshall


pgpk0uIIUIELJ.pgp
Description: PGP signature


Re: SASL problems with spnego on 8.0-BETA4

2009-09-18 Thread John Marshall
On Fri, 18 Sep 2009, 17:38 -0400, Rick Macklem wrote:
 When cyrus-sasl2 builds, it uses the little shell script
 /usr/bin/krb5-config with the args. --libs gssapi to get the list of
 libraries to link against. This doesn't return -lgssapi_spnego in the
 list. (The list can be changed by editting line #96 of 
 /usr/bin/krb5-config.)

I think this sounds promising!  It makes sense.  Thanks for pointing us
in this direction.

I should already be out at a customer site but I hope to do some poking
in krb5-config early next week to see if that might be the key to
resolving the (non-spnego) kerberos problems I've been having with 8.0.
In my case, I'll be seeing what joy I get by adding -lgssapi_krb5.

-- 
John Marshall


pgpWHjC8vDWrP.pgp
Description: PGP signature


Re: PATA disks/DVD not detected on ATI IXP 700 - cannot boot (dmesg attached)

2009-09-18 Thread Ted Faber
On Wed, Sep 16, 2009 at 09:13:27AM -0700, Ted Faber wrote:
 Hi.
 
 I'm trying to upgrade a machine to a new motherboard (the ECS
 A790GXM-AD3 AM3 790GX) my FreeBSD 7-STABLE system (GENERIC kernel,
 compiled from source on 10 Sept 2009) reaches the point where it's going
 to mount the root file system and can't find the disk.  It drops me into
 the manual specification of root file system menu, but there are no
 GEOM-managed disks to choose from.  
[...]

I managed to boot FreeBSD on this motherboard using a USB key.  Attached
is the dmesg from a verbose boot.  Any help would be appreciated.

-- 
Ted Faber
http://www.isi.edu/~faber   PGP: http://www.isi.edu/~faber/pubkeys.asc
Unexpected attachment on this mail? See http://www.isi.edu/~faber/FAQ.html#SIG
Copyright (c) 1992-2009 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 7.2-STABLE #6: Thu Sep 17 17:01:48 PDT 2009
r...@ylum.lunabase.org:/usr/obj/usr/src/sys/GENERIC
Preloaded elf kernel /boot/kernel/kernel at 0xc0e85000.
Preloaded elf module /boot/kernel/geom_label.ko at 0xc0e851a8.
Preloaded elf module /boot/kernel/acpi.ko at 0xc0e85258.
module_register: module g_label already exists!
Module g_label failed to register: 17
Calibrating clock(s) ... i8254 clock: 1193240 Hz
CLK_USE_I8254_CALIBRATION not specified - using default frequency
Timecounter i8254 frequency 1193182 Hz quality 0
Calibrating TSC clock ... TSC clock: 3000128259 Hz
CPU: AMD Athlon(tm) II X2 250 Processor (3000.13-MHz 686-class CPU)
  Origin = AuthenticAMD  Id = 0x100f62  Stepping = 2
  
Features=0x178bfbffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,MMX,FXSR,SSE,SSE2,HTT
  Features2=0x802009SSE3,MON,CX16,POPCNT
  AMD 
Features=0xee500800SYSCALL,NX,MMX+,FFXSR,Page1GB,RDTSCP,LM,3DNow!+,3DNow!
  AMD 
Features2=0x37ffLAHF,CMP,SVM,ExtAPIC,CR8,ABM,SSE4A,MAS,Prefetch,OSVW,IBS,SKINIT,WDT
  TSC: P-state invariant
  Cores per package: 2
Data TLB: 48 entries, fully associative
Instruction TLB: 32 entries, fully associative
L1 data cache: 64 kbytes, 64 bytes/line, 1 lines/tag, 2-way associative
L1 instruction cache: 64 kbytes, 64 bytes/line, 1 lines/tag, 2-way associative
L2 internal cache: 1024 kbytes, 64 bytes/line, 1 lines/tag, 8-way associative
real memory  = 3489333248 (3327 MB)
Physical memory chunk(s):
0x1000 - 0x0009dfff, 643072 bytes (157 pages)
0x0010 - 0x003f, 3145728 bytes (768 pages)
0x01025000 - 0xcc4cdfff, 3410661376 bytes (832681 pages)
avail memory = 3409977344 (3252 MB)
Table 'FACP' at 0xcffb0200
Table 'APIC' at 0xcffb0390
MADT: Found table at 0xcffb0390
MP Configuration Table version 1.1 found at 0xc00fc2b0
APIC: Using the MADT enumerator.
MADT: Found CPU APIC ID 0 ACPI ID 1: enabled
SMP: Added CPU 0 (AP)
MADT: Found CPU APIC ID 1 ACPI ID 2: enabled
SMP: Added CPU 1 (AP)
MADT: Found CPU APIC ID 130 ACPI ID 3: disabled
MADT: Found CPU APIC ID 131 ACPI ID 4: disabled
ACPI APIC Table: 051909 APIC2009
INTR: Adding local APIC 1 as a target
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
 cpu0 (BSP): APIC ID:  0
 cpu1 (AP): APIC ID:  1
bios32: Found BIOS32 Service Directory header at 0xc00f
bios32: Entry = 0xf0010 (c00f0010)  Rev = 0  Len = 1
pcibios: PCI BIOS entry at 0xf+0x31
pnpbios: Found PnP BIOS data at 0xc00f4ea0
pnpbios: Entry = f:664a  Rev = 1.0
Other BIOS signatures found:
APIC: CPU 0 has ACPI ID 1
APIC: CPU 1 has ACPI ID 2
ULE: setup cpu group 0
ULE: setup cpu 0
ULE: adding cpu 0 to group 0: cpus 1 mask 0x1
ULE: setup cpu group 1
ULE: setup cpu 1
ULE: adding cpu 1 to group 1: cpus 1 mask 0x2
ACPI: RSDP @ 0x0xf9580/0x0014 (v  0 ACPIAM)
ACPI: RSDT @ 0x0xcffb/0x003C (v  1 051909 RSDT2009 0x20090519 MSFT 
0x0097)
ACPI: FACP @ 0x0xcffb0200/0x0084 (v  1 051909 FACP2009 0x20090519 MSFT 
0x0097)
ACPI Warning (tbfadt-0505): Optional field Pm2ControlBlock has zero address 
or length:0   0/1 [20070320]
ACPI: DSDT @ 0x0xcffb0440/0xA5C4 (v  1  1 1000 0x INTL 
0x20051117)
ACPI: FACS @ 0x0xcffbe000/0x0040
ACPI: APIC @ 0x0xcffb0390/0x006C (v  1 051909 APIC2009 0x20090519 MSFT 
0x0097)
ACPI: MCFG @ 0x0xcffb0400/0x003C (v  1 051909 OEMMCFG  0x20090519 MSFT 
0x0097)
ACPI: OEMB @ 0x0xcffbe040/0x0072 (v  1 051909 OEMB2009 0x20090519 MSFT 
0x0097)
ACPI: HPET @ 0x0xcffbaa10/0x0038 (v  1 051909 OEMHPET  0x20090519 MSFT 
0x0097)
ACPI: SSDT @ 0x0xcffbaa50/0x0458 (v  1 A M I  POWERNOW 0x0001 AMD  
0x0001)
MADT: Found IO APIC ID 2, Interrupt 0 at 0xfec0
ioapic0: Routing external 8259A's - intpin 0
MADT: Interrupt override: source 0, irq 2
ioapic0: Routing IRQ 0 - intpin 2
MADT: Interrupt override: source 9, irq 9
ioapic0: intpin 9 trigger: level
ioapic0: intpin 9 polarity: low
ioapic0 Version 2.1 irqs 0-23 on motherboard
cpu0