Re: [users@httpd] using ldap secure causes core dump

[Minson, John M Mr ARMY GUEST]

note thi sis apache 2.2.10 # ldd httpd         libldap.so.5 =>  /usr/lib/libldap.so.5         libdl.so.1 =>    /lib/libdl.so.1         libssl.so.0.9.8 =>       /usr/local/ssl/lib/libssl.so.0.9.8         libcrypto.so.0.9.8 =>    /usr/local/ssl/lib/libcrypto.so.0.9.8         libm.so.2 =>     /lib/libm.so.2         libaprutil-1.so.0 =>     /usr/local/httpd/lib/libaprutil-1.so.0         libexpat.so.1 =>         /usr/sfw/lib/libexpat.so.1         libapr-1.so.0 =>         /usr/local/httpd/lib/libapr-1.so.0         libuuid.so.1 =>  /lib/libuuid.so.1         libsendfile.so.1 =>      /lib/libsendfile.so.1         librt.so.1 =>    /lib/librt.so.1         libsocket.so.1 =>        /lib/libsocket.so.1         libnsl.so.1 =>   /lib/libnsl.so.1         libpthread.so.1 =>       /lib/libpthread.so.1         libc.so.1 =>     /lib/libc.so.1         libsasl.so.1 =>  /usr/lib/libsasl.so.1         libmd.so.1 =>    /lib/libmd.so.1         libnspr4.so =>   /usr/lib/mps/libnspr4.so         libplc4.so =>    /usr/lib/mps/libplc4.so         libnss3.so =>    /usr/lib/mps/libnss3.so         libssl3.so =>    /usr/lib/mps/libssl3.so         libgcc_s.so.1 =>         /usr/local/lib/libgcc_s.so.1         libgcc_s.so.1 =>         /usr/sfw/lib/libgcc_s.so.1         libaio.so.1 =>   /lib/libaio.so.1         libmp.so.2 =>    /lib/libmp.so.2         libscf.so.1 =>   /lib/libscf.so.1         libthread.so.1 =>        /lib/libthread.so.1         libsoftokn3.so =>        /usr/lib/mps/libsoftokn3.so         libplds4.so =>   /usr/lib/mps/libplds4.so         libdoor.so.1 =>  /lib/libdoor.so.1         libuutil.so.1 =>         /lib/libuutil.so.1         libgen.so.1 =>   /lib/libgen.so.1         libbsm.so.1 =>   /lib/libbsm.so.1         libsecdb.so.1 =>         /lib/libsecdb.so.1         libtsol.so.2 =>  /lib/libtsol.so.2         libcmd.so.1 =>   /lib/libcmd.so.1         /platform/SUNW,Sun-Fire-T200/lib/libc_psr.so.1         /platform/SUNW,Sun-Fire-T200/lib/libmd_psr.so.1         /usr/lib/mps/cpu/sparcv8plus/libnspr_flt4.so ldd of mod_ssl and mod_authnz_ldap show nothing ? I think the issue is the 'libldap.so.5 =>  /usr/lib/libldap.so.5' .  This is pointing to the standard Solaris 10 ldap which I suspect was built against the Solaris 10 ssl . I cannot get the apache config/make to pick up my install of open ldap 2.4.11 installed in /usr/local If I set LD_LIBRARY_PATH=/usr/local/lib the apache config gives me checking for ldap support... checking for ldap_init in -lldap50... no checking for ldap_init in -lldapssl41... no checking for ldap_init in -lldapssl40... no checking for ldap_init in -lldapssl30... no checking for ldap_init in -lldapssl20... no checking for ldap_init in -lldapsdk... no checking for ldap_init in -lldapsdk... no checking for ldap_init in -lldap... no checking for ldap_init in -lldap... no checking for ldap_init in -lldap... no checking for ldap_init in -lldap... no configure: error: could not find an LDAP library configure failed for srclib/apr-util Tom Evans wrote: On Mon, 2008-11-24 at 10:33 -0500, Minson, John M Mr ARMY GUEST wrote: If I attempt to use ldaps I get [Mon Nov 24 10:19:07 2008] [debug] mod_authnz_ldap.c(582): [client 150.125.168.140] ldap authorize: Creating LDAP req structure [Mon Nov 24 10:19:15 2008] [notice] child pid 26129 exit signal Segmentation fault (11), possible coredump in /usr/local/httpd Works fine in non-secure mode Any ideas on what I can do get some more info on whats going on ? --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Output of these commands please: ldd /path/to/sbin/httpd ldd /path/to/mod_ssl.so ldd /path/to/mod_*ldap*.so You almost certainly have httpd/mod_ssl linked to one OpenSSL library, and mod_{,authnz_}ldap linked to another. Those commands should demonstrate that. The solution is to rebuild/reinstall apache. Tom --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See for more info. To unsubscribe, e-mail: [EMAIL PROTECTED] " from the digest: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]