[Bug 2044242] Re: ipa-client-install seg faults (s390x)

Graham Inggs 2044242 at bugs.launchpad.net
Tue Jun 18 16:37:12 UTC 2024 

** Also affects: lto-disabled-list (Ubuntu)
   Importance: Undecided
       Status: New

** Changed in: lto-disabled-list (Ubuntu Jammy)
       Status: New => Won't Fix

** Changed in: lto-disabled-list (Ubuntu Lunar)
       Status: New => Won't Fix

** Changed in: lto-disabled-list (Ubuntu Mantic)
       Status: New => Won't Fix

** Changed in: lto-disabled-list (Ubuntu Noble)
       Status: New => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to lto-disabled-list in Ubuntu.
https://bugs.launchpad.net/bugs/2044242

Title:
  ipa-client-install seg faults (s390x)

Status in Ubuntu on IBM z Systems:
  Fix Released
Status in lto-disabled-list package in Ubuntu:
  New
Status in python-gssapi package in Ubuntu:
  Fix Released
Status in lto-disabled-list source package in Jammy:
  Won't Fix
Status in python-gssapi source package in Jammy:
  Fix Released
Status in lto-disabled-list source package in Lunar:
  Won't Fix
Status in python-gssapi source package in Lunar:
  Fix Released
Status in lto-disabled-list source package in Mantic:
  Won't Fix
Status in python-gssapi source package in Mantic:
  Fix Released
Status in lto-disabled-list source package in Noble:
  Won't Fix
Status in python-gssapi source package in Noble:
  Fix Released

Bug description:
  SRU Justification:

  [ Impact ]

   * If compiled with gcc LTO (Link Time Optimization),
     the package python3-gssapi is causing a segmentation fault
     if used by freeipa (actually ipa-client-install).

   * Hence no ipa-client-install and configuration is possible,
     but this is needed in case centralized authentication against
     IPA servers need to be setup.

  [ Test Plan ]

   * Have an Ubuntu Server on s390x installation 22.04, 23.04, 23.10 or
  noble.

   * Install the freeipa-client to make use of the ipa-client-install,
     that again requires python3-gssapi.

   * Now execute:
     sudo ipa-client-install

   * Using the affected version of python3-gssapi, the ipa-client-install
     call will end in a segmentation fault (on s390x only):
     sudo ipa-client-install
     Segmentation fault

   * Using the fixed version of python3-gssapi, the ipa-client-install
     call will succeed, like:
     This program will set up IPA client.
     Version 4.9.8
     WARNING: conflicting time&date synchronization service 'ntp'
     will be disabled in favor of chronyd
     ...

  [ Where problems could occur ]

   * The updated package does not change a single line of code,
     it only removes LTO from the compile options in d/rules.

   * And this modification is for the s390x architecture only.

   * However, this modification, done in d/rules, might be done wrong
     which would break the compile or entire package build.

   * The modification in d/rules was done like in other known cases
     where using LTO is causing issues.

   * A test build (for all major) platforms was done, that also allowed
     a successful test of the PPA build on s390x on jammy
     (using the test plan above):
     https://launchpad.net/~fheimes/+archive/ubuntu/lp2044242

  [ Other Info ]
   
   * It was identified that this affects jammy up to noble.

   * There is an upstream version 1.8.3 of python-gssapi available
     that is even slightly newer than what we have in the archives for
     lunar, mantic and noble, but it is still affected by this issue.
  __________

  Executing 'ipa-client-install' (package: freeipa-client) is causing a
  segmentation fault:

  ubuntu at server:~$ sudo apt install freeipa-client
  ubuntu at server:~$ ipa-client-install
  Segmentation fault (core dumped)
  ubuntu at server:~$ ls -l /var/crash/
  total 2012
  -rw-r----- 1 ubuntu ubuntu 2057124 Nov 22 08:22 _usr_sbin_ipa-client-install.1000.crash
  ubuntu at server:~$ vi /var/log/syslog
  ...
  Nov 22 08:22:33 server kernel: [  162.136131] User process fault: interruption code 003b ilc:2 in ext_dce.cpython-310-s390x-linux-gnu.so[3ff8b880000+4000]
  Nov 22 08:22:33 server kernel: [  162.136153] Failing address: 000003ff23f0f000 TEID: 000003ff23f0f800
  Nov 22 08:22:33 server kernel: [  162.136156] Fault in primary space mode while using user ASCE.
  Nov 22 08:22:33 server kernel: [  162.136160] AS:000000009f5581c7 R3:0000000000000024
  Nov 22 08:22:33 server kernel: [  162.136166] CPU: 3 PID: 4294 Comm: ipa-client-inst Not tainted 5.15.0-89-generic #99-Ubuntu
  Nov 22 08:22:33 server kernel: [  162.136169] Hardware name: IBM 2964 N63 400 (z/VM 6.4.0)
  Nov 22 08:22:33 server kernel: [  162.136170] User PSW : 0705200180000000 000003ff23f0f150
  Nov 22 08:22:33 server kernel: [  162.136173]            R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:1 AS:0 CC:2 PM:0 RI:0 EA:3
  Nov 22 08:22:33 server kernel: [  162.136176] User GPRS: 0f00000100000043 000002aa242fb170 000003ff8b885240 0600000000000000
  Nov 22 08:22:33 server kernel: [  162.136178]            0000000000000080 000002aa242fb170 000003ff8b882c00 000003ff8bde6d70
  Nov 22 08:22:33 server kernel: [  162.136180]            000003ff8bd50450 000003ff8bdbc7b0 000003ff8bd599b0 000003ff8bd599e0
  Nov 22 08:22:33 server kernel: [  162.136182]            000003ff8c8b0f90 000003ff8bdbc7b0 000002aa23f49cac 000003ffe5c745c0
  Nov 22 08:22:33 server kernel: [  162.136189] User Code: Bad PSW.
  Nov 22 08:22:33 server kernel: [  162.136190] Last Breaking-Event-Address:
  Nov 22 08:22:33 server kernel: [  162.136190]  [<000003ff8b882c06>] 0x3ff8b882c06
  Nov 22 08:22:33 server systemd[986]: Started D-Bus User Message Bus.
  Nov 22 08:22:33 server dbus-daemon[4303]: [session uid=1000 pid=4303] AppArmor D-Bus mediation is enabled
  ...

  ProblemType: Bug
  DistroRelease: Ubuntu 22.04
  Package: freeipa-client 4.9.8-1
  ProcVersionSignature: Ubuntu 5.15.0-89.99-generic 5.15.126
  Uname: Linux 5.15.0-89-generic s390x
  ApportVersion: 2.20.11-0ubuntu82.5
  Architecture: s390x
  CasperMD5CheckResult: pass
  CloudArchitecture: s390x
  CloudID: none
  CloudName: none
  CloudPlatform: none
  CloudSubPlatform: config
  Date: Wed Nov 22 08:52:47 2023
  InstallationDate: Installed on 2023-11-22 (0 days ago)
  InstallationMedia: Ubuntu-Server 22.04.2 LTS "Jammy Jellyfish" - Release s390x (20230220.1)
  SourcePackage: freeipa
  UpgradeStatus: No upgrade log present (probably fresh install)

  $ apt-cache policy freeipa-client
  freeipa-client:
    Installed: 4.9.8-1
    Candidate: 4.9.8-1
    Version table:
   *** 4.9.8-1 500
          500 http://ports.ubuntu.com/ubuntu-ports jammy/universe s390x Packages
          100 /var/lib/dpkg/status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/2044242/+subscriptions

More information about the foundations-bugs mailing list