threerings / openvpn-auth-ldap

Implements username/password authentication via LDAP for OpenVPN 2.x.
Other
135 stars 62 forks source link

segfault at start - fresh Debian Jessie 8.2 #54

Open Nightreaver opened 8 years ago

Nightreaver commented 8 years ago

Whenever I run (fresh debian 8.2.0 jessie install)

~# apt-get install openvpn openvpn-auth-ldap easy-rsa

openvpn --dev null --plugin /usr/lib/openvpn/openvpn-auth-ldap.so /etc/openvpn/auth-ldap.cnf

it immediately stops with segfault

openvpn --dev null --plugin /usr/lib/openvpn/openvpn-auth-ldap.so /etc/openvpn/auth-ldap.cnf Sat Dec 12 15:27:12 2015 OpenVPN 2.3.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Dec 1 2014 Sat Dec 12 15:27:12 2015 library versions: OpenSSL 1.0.1k 8 Jan 2015, LZO 2.08 Segmentation fault

uname -a Linux server 3.16.0-4-amd64 #1 SMP Debian 3.16.7-ckt11-1+deb8u6 (2015-11-09) x86_64 GNU/Linux

any ideas? do I miss a dependency?

~# ldd /usr/lib/openvpn/openvpn-auth-ldap.so linux-vdso.so.1 (0x00007ffde199d000) libldap_r-2.4.so.2 => /usr/lib/x86_64-linux-gnu/libldap_r-2.4.so.2 (0x00007f0acd8f3000) liblber-2.4.so.2 => /usr/lib/x86_64-linux-gnu/liblber-2.4.so.2 (0x00007f0acd6e4000) libgnustep-base.so.1.24 => /usr/lib/libgnustep-base.so.1.24 (0x00007f0accf07000) libobjc.so.4 => /usr/lib/x86_64-linux-gnu/libobjc.so.4 (0x00007f0acccea000) libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007f0acc9e9000) libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 (0x00007f0acc7d3000) libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f0acc5b6000) libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f0acc20d000) libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2 (0x00007f0acbff6000) libsasl2.so.2 => /usr/lib/x86_64-linux-gnu/libsasl2.so.2 (0x00007f0acbdda000) libgnutls-deb0.so.28 => /usr/lib/x86_64-linux-gnu/libgnutls-deb0.so.28 (0x00007f0acbabb000) libavahi-common.so.3 => /usr/lib/x86_64-linux-gnu/libavahi-common.so.3 (0x00007f0acb8ae000) libavahi-client.so.3 => /usr/lib/x86_64-linux-gnu/libavahi-client.so.3 (0x00007f0acb69d000) libxslt.so.1 => /usr/lib/x86_64-linux-gnu/libxslt.so.1 (0x00007f0acb45e000) libxml2.so.2 => /usr/lib/x86_64-linux-gnu/libxml2.so.2 (0x00007f0acb0f7000) libffi.so.6 => /usr/lib/x86_64-linux-gnu/libffi.so.6 (0x00007f0acaeef000) libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f0acaceb000) libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007f0acaad0000) libicui18n.so.52 => /usr/lib/x86_64-linux-gnu/libicui18n.so.52 (0x00007f0aca6be000) libicuuc.so.52 => /usr/lib/x86_64-linux-gnu/libicuuc.so.52 (0x00007f0aca340000) /lib64/ld-linux-x86-64.so.2 (0x00007f0acdd64000) libp11-kit.so.0 => /usr/lib/x86_64-linux-gnu/libp11-kit.so.0 (0x00007f0aca0fa000) libtasn1.so.6 => /usr/lib/x86_64-linux-gnu/libtasn1.so.6 (0x00007f0ac9ee6000) libnettle.so.4 => /usr/lib/x86_64-linux-gnu/libnettle.so.4 (0x00007f0ac9cb4000) libhogweed.so.2 => /usr/lib/x86_64-linux-gnu/libhogweed.so.2 (0x00007f0ac9a85000) libgmp.so.10 => /usr/lib/x86_64-linux-gnu/libgmp.so.10 (0x00007f0ac9802000) libdbus-1.so.3 => /lib/x86_64-linux-gnu/libdbus-1.so.3 (0x00007f0ac95ba000) liblzma.so.5 => /lib/x86_64-linux-gnu/liblzma.so.5 (0x00007f0ac9397000) libicudata.so.52 => /usr/lib/x86_64-linux-gnu/libicudata.so.52 (0x00007f0ac7b2a000) libstdc++.so.6 => /usr/lib/x86_64-linux-gnu/libstdc++.so.6 (0x00007f0ac781f000)

Nightreaver commented 8 years ago

Yeah... fixed!

You should mention to use tabstops instead simple spaces in the config-file... maybe somewhere around the config site?!

Thanks

aniolm9 commented 4 years ago

@Nightreaver Could you explain in more detail how you fixed it?

Thanks!

Nightreaver commented 4 years ago

Hey

I mentioned it already. You have use "all tabs" for indent, if you mix tabs/spaces it will fail.

image

if you have mixed like

image

it will fail.

aniolm9 commented 4 years ago

Could you try it in Debian Stretch, please? It works fine in my server.

Screenshot_20190806_123758

What gives me a segfault is running openvpn --dev null --plugin /usr/lib/openvpn/openvpn-auth-ldap.so with no more parameters.

Thanks!