can't start slapd in a VE [message #34435] |
Thu, 01 January 2009 22:31 ![Go to next message Go to next message](/theme/ovz3/images/down.png) |
23max
Messages: 4 Registered: December 2008
|
Junior Member |
|
|
Hi,
i'm trying to install slapd package of Debian/Lenny in an OpenVZ VE. slapd dies with message
Fatal: no entropy gathering module detected
Aborted
stracing it gives
brk(0x80d000) = 0x80d000
brk(0x82e000) = 0x82e000
access("/dev/random", R_OK) = -1 EPERM (Operation not permitted)
write(2, "Fatal: "..., 7Fatal: ) = 7
write(2, "no entropy gathering module detec"..., 37no entropy gathering module detected
) = 37
rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = 0
tgkill(1238, 1238, SIGABRT) = 0
--- SIGABRT (Aborted) @ 0 (0) ---
+++ killed by SIGABRT +++
but the /dev/[u]random devices exist and deliver random data when read. Permission is set to 0666. The HN runs Debian/testing amd64 with vzctl 3.0.23, Kernel is a git checkout from linux-2.6.27-openvz. I have other 10 VEs running with apache, databases and similar, without problems. Any idea what could be wrong here?
[Updated on: Thu, 01 January 2009 22:33] Report message to a moderator
|
|
|
Re: can't start slapd in a VE [message #34716 is a reply to message #34435] |
Tue, 27 January 2009 18:18 ![Go to previous message Go to previous message](/theme/ovz3/images/up.png) ![Go to next message Go to next message](/theme/ovz3/images/down.png) |
![](http://new-forum.openvz.org/images/custom_avatars/2416.png) |
aTan
Messages: 29 Registered: March 2008
|
Junior Member |
|
|
I have the same error with svn update after upgrading to 2.6.27-aivazovsky from git a few days ago. Even after manually setting perms to 666 it doesn't work.
rt_sigaction(SIGPIPE, {SIG_IGN}, {SIG_IGN}, 8) = 0
brk(0x829000) = 0x829000
brk(0x84a000) = 0x84a000
access("/dev/random", R_OK) = -1 EPERM (Operation not permitted)
write(2, "Fatal: "..., 7Fatal: ) = 7
write(2, "no entropy gathering module detec"..., 37no entropy gathering module detected
) = 37
rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = 0
tgkill(725, 725, SIGABRT) = 0
|
|
|
|
|
|
Re: can't start slapd in a VE [message #34762 is a reply to message #34435] |
Sun, 01 February 2009 10:55 ![Go to previous message Go to previous message](/theme/ovz3/images/up.png) ![Go to next message Go to next message](/theme/ovz3/images/down.png) |
|
The devices hint fixed the write problem...
DEVICES="c:1:9:rw c:1:8:rw "
ls -al /dev/*random
crw-rw-rw- 1 root root 1, 8 Feb 1 11:39 /dev/random
crw-rw-rw- 1 root root 1, 9 Feb 1 11:39 /dev/urandom
But if I try to:
strace certtool --generate-privkey --bits 512 >new-params
mprotect(0x7f1f33c2d000, 12288, PROT_READ) = 0
munmap(0x7f1f342c9000, 19430) = 0
brk(0) = 0x528000
brk(0x549000) = 0x549000
brk(0x56a000) = 0x56a000
access("/dev/random", R_OK) = -1 EPERM (Operation not permitted)
write(2, "Fatal: ", 7Fatal: ) = 7
write(2, "no entropy gathering module dete"..., 37no entropy gathering module detected
) = 37
rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, = 0
gettid() = 1671
tgkill(1671, 1671, SIGABRT) = 0
--- SIGABRT (Aborted) @ 0 (0) ---
+++ killed by SIGABRT +++
Process 1671 detached
Is that a problem with capabilities?
Lars
|
|
|
Re: can't start slapd in a VE [message #34763 is a reply to message #34762] |
Sun, 01 February 2009 15:37 ![Go to previous message Go to previous message](/theme/ovz3/images/up.png) ![Go to next message Go to next message](/theme/ovz3/images/down.png) |
23max
Messages: 4 Registered: December 2008
|
Junior Member |
|
|
Hm. With git checkout of linux-2.6.27-ovz from last night I still have the same problem with slapd. I've set --devices as suggested.
open("/var/lib/ldap/DB_CONFIG", O_RDONLY) = 10
close(10) = 0
read(9, "ccess to *\n by dn=\"cn=admi"..., 4096) = 635
read(9, ""..., 4096) = 0
read(9, ""..., 4096) = 0
close(9) = 0
munmap(0x7f40ed532000, 4096) = 0
brk(0x80d000) = 0x80d000
brk(0x82e000) = 0x82e000
access("/dev/random", R_OK) = -1 EPERM (Operation not permitted)
write(2, "Fatal: "..., 7Fatal: ) = 7
write(2, "no entropy gathering module detec"..., 37no entropy gathering module detected
) = 37
rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = 0
tgkill(1391, 1391, SIGABRT) = 0
--- SIGABRT (Aborted) @ 0 (0) ---
+++ killed by SIGABRT +++
|
|
|
|
|