Apache seg错误. krb5int_key_delete断言destructors_set [keynum] == 1失败 [英] Apache seg fault. krb5int_key_delete Assertion destructors_set[keynum] == 1 failed

问题描述

我使用Apache 2.4.10和Debian8.我安装了apache和大多数带有apt的软件包.长期以来一切都很好，但是突然之间我们开始出现段错误.

I use Apache 2.4.10 and Debian 8. I installed apache and most packages with apt. For long time all was good, but suddenly we started to receive seg fault.

[Wed Jan 02 00:55:19.233027 2019] [mpm_prefork:notice] [pid 25161] AH00171: Graceful restart requested, doing restart
apache2: ../../../src/util/support/threads.c:383: krb5int_key_delete: Assertion `destructors_set[keynum] == 1' failed.
[Wed Jan 02 00:55:19.326118 2019] [core:notice] [pid 25161] AH00060: seg fault or similar nasty error detected in the parent process
apache2: ../../../src/util/support/threads.c:383: krb5int_key_delete: Assertion `destructors_set[keynum] == 1' failed.
apache2: ../../../src/util/support/threads.c:383: krb5int_key_delete: Assertion `destructors_set[keynum] == 1' failed.
apache2: ../../../src/util/support/threads.c:383: krb5int_key_delete: Assertion `destructors_set[keynum] == 1' failed.
apache2: ../../../src/util/support/threads.c:383: krb5int_key_delete: Assertion `destructors_set[keynum] == 1' failed.
apache2: ../../../src/util/support/threads.c:383: krb5int_key_delete: Assertion `destructors_set[keynum] == 1' failed.
apache2: ../../../src/util/support/threads.c:383: krb5int_key_delete: Assertion `destructors_set[keynum] == 1' failed.
[Wed Jan 02 00:55:19.347698 2019] [:alert] [pid 12257] (4)Interrupted system call: FastCGI: read() from pipe failed (0)
[Wed Jan 02 00:55:19.347729 2019] [:alert] [pid 12257] (4)Interrupted system call: FastCGI: the PM is shutting down, Apache seems to have disappeared - bye

似乎是libkrb5.so错误.据我所知，我在机器上有2个库-libkrb5.so.3和libkrb5.so.3.3.

It seems to be libkrb5.so at fault. I have 2 libraries on machine as far as i found - libkrb5.so.3 and libkrb5.so.3.3.

• krb5int_key_delete让我觉得它的kerberos库
• 此方法在此别名错误.

• krb5int_key_delete makes me think its kerberos library.
• The method is aliased here to one in error.

我确实升级了所有软件，希望对其进行修补.但是没有成功.我们不为Apache使用kerberos模块.

I did upgrade all software in hope its patched. But no success. We dont use kerberos module for apache.

有什么想法可以使用这个库，甚至如何防止这个问题?

Any idea what could be using this library and even how to prevent this issue?

推荐答案

我也遇到了这个问题，并试图确定原因

I'm also running into this, and trying to determine the cause

关于任何想法都可以使用该库":

Regarding "Any idea what could be using this library":

利用ldd并假设您具有apache模块的中心位置，您可以遍历模块列表并使用此库转储模块.例如:

Utilizing ldd and assuming you have a central location of apache modules, you can iterate through the list of modules and dump ones using this library. Ex:

find /etc/httpd/modules/*.so -exec sh -c 'echo {}; ldd {} | grep libkrb5' \;

(在我们的例子中，这将返回以下内容)

(in our case, this returns the following)

/etc/httpd/modules/libphp7.so
    libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007f4f35f65000)
    libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007f4f34839000)
/etc/httpd/modules/libphp7-zts.so
    libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007ff228114000)
    libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007ff226c04000)
/etc/httpd/modules/mod_ssl.so
    libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007f0c0c7fa000)
    libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007f0c0bf9d000)

我确实在 https://krbdev.mit上发现了该错误. .edu/rt/Ticket/Display.html?id = 8614 指向安装的两个不同版本，这会导致问题，但是在我们的环境中，我们在/usr/lib64中拥有多个库，但libkrb5.so.3是与libkrb5.so.3.3的符号链接，因此我将确保这不是您所看到的.

I did notice the bug at https://krbdev.mit.edu/rt/Ticket/Display.html?id=8614 that points to two different versions installed causing issues, but on our environment we have those multiple libraries in /usr/lib64, except libkrb5.so.3 is a symlink to libkrb5.so.3.3, so I would make sure that's not what you're seeing.

我已发送电子邮件至[e-mail](基于 https://k5wiki .kerberos.org/wiki/Reporting_bugs )，希望不久后将有指向该票证的链接.

I have sent an email to [e-mail] (based on https://k5wiki.kerberos.org/wiki/Reporting_bugs) and will hopefully have a link to the ticket to share in this post soonish.

关注错误报告@ https://krbdev. mit.edu/rt/Ticket/Display.html?id=8863

这篇关于Apache seg错误. krb5int_key_delete断言destructors_set [keynum] == 1失败的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！