We had exactly the same problem (on Solaris 10 though): segfaults from the child processes of apache when it tries to authenticate via LDAP.
The reason was that we had our Apache installed in a different location than the standard one (which is /usr/local/apache2). Could that be the case with your installation? Where does your Apache reside?
After some truss'ing we found that it failed when trying to access /usr/local/apache2/lib/apr-util-1/apr_ldap.so, which obviously didn't exist in our case. So, although the Solaris package we used to install Apache supported specifying a custom installation directory, the installation was not exactly correct (some paths were hardcoded/compiled/linked/... to be in /usr/local/apache2).
As a workaround we made a symlink from /usr/local/apache2/lib/apr-util-1 to <location of apach2 lib>/apr-util-1. That solved the problem.
Regards,
Johan
-----Oorspronkelijk bericht-----
Van: Carlos Beppler [mailto:beppler_at_gmail.com]
Verzonden: vrijdag 24 april 2009 14:55
Aan: Irfan Sayed
CC: webpost_at_tigris.org; users_at_subversion.tigris.org
Onderwerp: Re: Re: ldap authentication in subversion
It appears that your LDAP module is causing segmentation faults on the
child process.
I do not have experience with Fedora (we use Debian here).
You are loading the mod_authnz_ldap. Are you loading the mod_ldap too?
Look for this entries on your configuration files.
LoadModule ldap_module /usr/lib/apache2/modules/mod_ldap.so
LoadModule authnz_ldap_module /usr/lib/apache2/modules/mod_authnz_ldap.so
[Fri Apr 24 11:00:12 2009] [debug] mod_authnz_ldap.c(377): [client
10.192.2.195] [12733] auth_ldap authenticate: using URL
ldap://exfo.com:389/DC=exfo,DC=com?sAMAccountName?sub?(objectClass=*)
[Fri Apr 24 11:00:13 2009] [notice] child pid 12733 exit signal
Segmentation fault (11)
On Fri, Apr 24, 2009 at 09:41, Irfan Sayed <irfu.sayed_at_gmail.com> wrote:
> Hi,
>
> Apache is running on Fedora 10 (Linux).
> I have attached error.log for your reference.
>
> Please please advice/help
>
> Regards
> Irf
>
>
> On 4/24/09, Carlos Alberto Costa Beppler <beppler_at_gmail.com> wrote:
>> If you are using Windows 2000 or later the port 389 is probably already
>> open.
>>
>> Is this apache on Windows or Linux? Can you send the contents of the
>> error log file from Apache?
>>
>> On Fri, Apr 24, 2009 at 09:10, Irfan Sayed <irfu.sayed_at_gmail.com> wrote:
>>> Sorry.
>>> Here is the updated one.
>>>
>>> <Location "/svn">
>>> DAV svn
>>> SVNParentPath /usr/local/svn
>>> SVNListParentPath On
>>> SVNAutoversioning On
>>> AuthBasicProvider ldap
>>> AuthType Basic
>>> AuthzLDAPAuthoritative off
>>> AuthName "My "
>>> AuthLDAPURL
>>> "ldap://sppufls01.exfo.com:389/DC=exfo.com?sAMAccountName?sub?(objectClass=*)"
>>> AuthLDAPBindDN "CN=irfsay1,CN=Users,DC=exfo.com"
>>> AuthLDAPBindPassword jaba_1234
>>> AuthzSVNAccessFile /etc/subversion/acl
>>> # require ldap-group CN=irfsay1,CN=Users,DC=exfo.com
>>> require valid-user
>>> </Location>
>>>
>>> Still it is not working. i think the problem is that 389 port might
>>> not be opened on the windows domain controller. Is it neccessary that
>>> it should be opened??
>>>
>>> Please advice
>>> Regards
>>> Irf
>>>
>>>
>>>
>>> On 4/24/09, webpost_at_tigris.org <webpost_at_tigris.org> wrote:
>>>> Apparently from what you write here, you have two AuthLDAPBindDN
>>>> directives
>>>> in your httpd.conf.
>>>>
>>>> ------------------------------------------------------
>>>> http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1890469
>>>>
>>>> To unsubscribe from this discussion, e-mail:
>>>> [users-unsubscribe_at_subversion.tigris.org].
>>>>
>>>
>>> ------------------------------------------------------
>>> http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1891212
>>>
>>> To unsubscribe from this discussion, e-mail:
>>> [users-unsubscribe_at_subversion.tigris.org].
>>>
>>
>
------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1891762
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].
------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=1065&dsMessageId=1892135
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_subversion.tigris.org].
Received on 2009-04-24 15:12:03 CEST