[krbdev.mit.edu #8614] Error with SAP NW 7.51 krb5int_key_register: Assertion `destructors_set[keynum] == 0' failed

[Dmitri Matveev via RT]

Hello, Dmitri!Yes, problem is an inconsistent version lib in  /usr/lib64/ and /usr/local/lib/
ls -la /usr/lib64/libkrb5support.so.0.1
-rwxr-xr-x. 1 root root 58728 Apr 28 22:49 /usr/lib64/libkrb5support.so.0.1ls -la /usr/local/lib/libkrb5support.so.0.1
-rw-r--r--. 1 root root 181632 Sep 21 09:49 /usr/local/lib/libkrb5support.so.0.1
 ls -la /usr/lib64/libgssapi_krb5.so.2.2
-rwxr-xr-x. 1 root root 320776 Apr 28 22:49 /usr/lib64/libgssapi_krb5.so.2.2
 ls -la /usr/local/lib/libgssapi_krb5.so.2.2
-rw-r--r--. 1 root root 1929168 Sep 21 09:49 /usr/local/lib/libgssapi_krb5.so.2.2
I try set profile parameter SAP APP to:snc/gssapi_lib = /usr/lib64/libgssapi_krb5.so.2
and SAP APP start with SSO
but previous version 1.14.1 we set this parameter to:snc/gssapi_lib = /usr/local/lib/libgssapi_krb5.so
I'm not sure now if the correct library is working.


 

    On Thursday, September 21, 2017 6:03 PM, Dmitri Matveev via RT <rt-comment at krbdev.mit.edu> wrote:
 

  Hello,We use MIT Kerberos krb5-1.15.1 via SSO for SAP ABAP authentication user. OS version RHEL 7.3 with last kernel patchLinux sapfs2ci 3.10.0-693.2.2.el7.x86_64 #1 SMP Sat Sep 9 03:55:24 EDT 2017 x86_64 x86_64 x86_64 GNU/Linux After update krb5* to last version:krb5-libs.x86_64                                                                                                  1.15.1-8.el7                                                                                      
krb5-workstation.x86_64Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â  1.15.1-8.el7Â Â Â Â Â Â Â 
Ticket is received from ADÂ an work properly:Â sapfs2ci:fs2adm 65>Â  /usr/bin/kinit -k -V SAP/S41 at CO.METINVEST.COM
Using default cache: /tmp/krb5cc_1039
Using principal: SAP/S41 at CO.METINVEST.COM
Authenticated to Kerberos v5
sapfs2ci:fs2adm 66> /usr/bin/klist -f
Ticket cache: FILE:/tmp/krb5cc_1039
Default principal: SAP/S41 at CO.METINVEST.COMValid starting       Expires              Service principal
09/21/2017 09:27:51Â  09/21/2017 19:27:51Â  krbtgt/CO.METINVEST.COM at CO.METINVEST.COM
        renew until 09/22/2017 09:27:51, Flags: RIA

We have problem with start SAP APP server (used last SAP kernel 749 Linux GNU SLES-11 x86_64 cc4.8.5 use-pr170902 path 315)In logs stderr0 (SAP APP)^
dw.sapFS2_D00: threads.c:357: krb5int_key_register: Assertion `destructors_set[keynum] == 0' failed
In log main SAP process disp+work: 
N  SncInit(): found  snc/gssapi_lib=/usr/local/lib/libgssapi_krb5.so
NÂ Â Â  File "/usr/local/lib/libgssapi_krb5.so" dynamically loaded as GSS-API v2 library.
MÂ  si_code = -6
MÂ  Sending process ID = 28307
MÂ  Real user ID of sending process = 1039
MÂ  ------------------ C-STACK ----------------------
dw.sapFS2_D00[S](LinStackBacktrace+0xa9)[0x654518]
dw.sapFS2_D00[S](LinStack+0x3e)[0x657484]
dw.sapFS2_D00[S](CTrcStack2+0x4b)[0x6532dd]
dw.sapFS2_D00[S](SigIGenAction+0x730)[0x2553940]
<signal handler called> [0x7f5689fee5e0]
libc.so.6[S](__GI_raise+0x37)[0x7f5689c511f7]
libc.so.6[S](__GI_abort+0x148)[0x7f5689c528e8]
libc.so.6[S](__assert_fail_base+0x126)[0x7f5689c4a266]
libc.so.6[S](__GI___assert_fail+0x42)[0x7f5689c4a312]
libkrb5support.so.0[S](krb5int_key_register+0xf4)[0x7f53a7478694]
libgssapi_krb5.so[gssapi_krb5.c:1091](gss_krb5int_lib_init+0x2a)[0x7f567eece41a]
libgssapi_krb5.so[g_initialize.c:120](gssint_mechglue_init__aux+0x1f)[0x7f567eebec8f]
libpthread.so.0[S](__GI___pthread_once+0x50)[0x7f5689febe20]
libgssapi_krb5.so[g_initialize.c:156](gssint_mechglue_initialize_library+0x17)[0x7f567eec3297]
libgssapi_krb5.so[g_initialize.c:277](gss_indicate_mechs+0x4d)[0x7f567eec331d]
dw.sapFS2_D00[S](SncPDLInit+0x49a)[0x1b9dee6]
dw.sapFS2_D00[S](SncInit+0xa5c)[0x1ba0012]
dw.sapFS2_D00[S](SncInitU+0x49)[0x1ba1168]
dw.sapFS2_D00[S](ThSncInit(unsigned char)+0x8b)[0x51fce3]
dw.sapFS2_D00[S](ThInit()+0x1794)[0x4eebf3]
dw.sapFS2_D00[S](ThStart()+0x35c)[0x4ef6c6]
dw.sapFS2_D00[S](DpMain+0x39b)[0x229311b]
libc.so.6[S](__libc_start_main+0xf5)[0x7f5689c3dc05]
MÂ  -------------------------------------------------
MÂ  caught SIGABRT (6)
Downgrade version krb5-libs.x86_64 to 1.14.1 not helpedDowngrade version SAP KERNEL not helpedDowngrade version RHEL KERNEL not helped
We have many SAP system worked on krb5-1.14.1Â for a SAPÂ SSO 
_______________________________________________
krb5-bugs mailing list
krb5-bugs at mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs