Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-21385

PAM v2 plugin produces lots of zombie processes

Details

    Description

      The authentication using the PAM v2 module works, but produces a lot of zombie processes.

      $ ps aux | grep auth_pam_tool
      		 
      ...
      		 
       
      		 
      root      1637  0.0  0.0      0     0 ?        Z    Dez22   0:00 [auth_pam_tool] <defunct>
      		 
      root      1638  0.0  0.0      0     0 ?        Z    Dez22   0:00 [auth_pam_tool] <defunct>
      		 
      root      1639  0.0  0.0      0     0 ?        Z    Dez21   0:00 [auth_pam_tool] <defunct>
      		 
      root      1640  0.0  0.0      0     0 ?        Z    Dez21   0:00 [auth_pam_tool] <defunct>
      		 
      root      1641  0.0  0.0      0     0 ?        Z    Dez22   0:00 [auth_pam_tool] <defunct>
      		 
      root      1642  0.0  0.0      0     0 ?        Z    08:21   0:00 [auth_pam_tool] <defunct>
      		 
      ...

      Configuration details:

      • Using sssd with ldap backend for mariadb service
      • OS: CentOS 8

      Logs (to make clear authentifaction itself works):

      Dez 23 14:30:59 web1 mysqld[13717]: pam_sss(mariadb:auth): authentication success; logname= uid=27 euid=27 tty= ruser= rhost= user=web_<removed>
      		 
      Dez 23 14:31:01 web1 mysqld[13717]: pam_sss(mariadb:auth): authentication success; logname= uid=27 euid=27 tty= ruser= rhost= user=web_<removed>
      		 
      Dez 23 14:31:01 web1 mysqld[13717]: pam_sss(mariadb:auth): authentication success; logname= uid=27 euid=27 tty= ruser= rhost= user=web_<removed>

      /etc/pam.d/mariadb

      auth    required pam_sss.so domains=mariadb
      		 
      account required pam_sss.so domains=mariadb

      Attachments

        Issue Links

          is caused by

          Task - A task that needs to be done. MDEV-7032 new pam plugin with a suid wrapper

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Task - A task that needs to be done. MDEV-15473 Isolate/sandbox PAM modules, so that they can't crash the server

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            Ascending order - Click to sort in descending order
            fbezdeka Florian Bezdeka created issue -
            fbezdeka Florian Bezdeka made changes -
            Field Original Value New Value
            Description The authentication using the PAM v2 module works, but produces a lot of zombie processes.

            {{
            $ ps aux | grep auth_pam_tool
            ...
            root 1637 0.0 0.0 0 0 ? Z Dez22 0:00 [auth_pam_tool] <defunct>
            root 1638 0.0 0.0 0 0 ? Z Dez22 0:00 [auth_pam_tool] <defunct>
            root 1639 0.0 0.0 0 0 ? Z Dez21 0:00 [auth_pam_tool] <defunct>
            root 1640 0.0 0.0 0 0 ? Z Dez21 0:00 [auth_pam_tool] <defunct>
            root 1641 0.0 0.0 0 0 ? Z Dez22 0:00 [auth_pam_tool] <defunct>
            root 1642 0.0 0.0 0 0 ? Z 08:21 0:00 [auth_pam_tool] <defunct>
            ...}}

            Configuration details:
            - Using sssd with ldap backend for mariadb service
            - OS: CentOS 8

            Logs (to make clear authentifaction itself works):
            {{Dez 23 14:30:59 web1 mysqld[13717]: pam_sss(mariadb:auth): authentication success; logname= uid=27 euid=27 tty= ruser= rhost= user=web_<removed>
            Dez 23 14:31:01 web1 mysqld[13717]: pam_sss(mariadb:auth): authentication success; logname= uid=27 euid=27 tty= ruser= rhost= user=web_<removed>
            Dez 23 14:31:01 web1 mysqld[13717]: pam_sss(mariadb:auth): authentication success; logname= uid=27 euid=27 tty= ruser= rhost= user=web_<removed>}}             		The authentication using the PAM v2 module works, but produces a lot of zombie processes.

            {noformat}
            $ ps aux | grep auth_pam_tool
            ...

            root 1637 0.0 0.0 0 0 ? Z Dez22 0:00 [auth_pam_tool] <defunct>
            root 1638 0.0 0.0 0 0 ? Z Dez22 0:00 [auth_pam_tool] <defunct>
            root 1639 0.0 0.0 0 0 ? Z Dez21 0:00 [auth_pam_tool] <defunct>
            root 1640 0.0 0.0 0 0 ? Z Dez21 0:00 [auth_pam_tool] <defunct>
            root 1641 0.0 0.0 0 0 ? Z Dez22 0:00 [auth_pam_tool] <defunct>
            root 1642 0.0 0.0 0 0 ? Z 08:21 0:00 [auth_pam_tool] <defunct>
            ...
            {noformat}

            Configuration details:
            - Using sssd with ldap backend for mariadb service
            - OS: CentOS 8

            Logs (to make clear authentifaction itself works):
            {noformat}
            Dez 23 14:30:59 web1 mysqld[13717]: pam_sss(mariadb:auth): authentication success; logname= uid=27 euid=27 tty= ruser= rhost= user=web_<removed>
            Dez 23 14:31:01 web1 mysqld[13717]: pam_sss(mariadb:auth): authentication success; logname= uid=27 euid=27 tty= ruser= rhost= user=web_<removed>
            Dez 23 14:31:01 web1 mysqld[13717]: pam_sss(mariadb:auth): authentication success; logname= uid=27 euid=27 tty= ruser= rhost= user=web_<removed>
            {noformat}
            fbezdeka Florian Bezdeka made changes -
            Affects Version/s 10.4 [ 22408 ]
            Affects Version/s 10.4.10 [ 23907 ]
            elenst Elena Stepanova made changes -
            Fix Version/s 10.4 [ 22408 ]
            Assignee Sergei Golubchik [ serg ]
            elenst Elena Stepanova made changes -
            Assignee Sergei Golubchik [ serg ] Elena Stepanova [ elenst ]
            elenst Elena Stepanova made changes -
            Labels need_feedback
            fbezdeka Florian Bezdeka made changes -
            Description The authentication using the PAM v2 module works, but produces a lot of zombie processes.

            {noformat}
            $ ps aux | grep auth_pam_tool
            ...

            root 1637 0.0 0.0 0 0 ? Z Dez22 0:00 [auth_pam_tool] <defunct>
            root 1638 0.0 0.0 0 0 ? Z Dez22 0:00 [auth_pam_tool] <defunct>
            root 1639 0.0 0.0 0 0 ? Z Dez21 0:00 [auth_pam_tool] <defunct>
            root 1640 0.0 0.0 0 0 ? Z Dez21 0:00 [auth_pam_tool] <defunct>
            root 1641 0.0 0.0 0 0 ? Z Dez22 0:00 [auth_pam_tool] <defunct>
            root 1642 0.0 0.0 0 0 ? Z 08:21 0:00 [auth_pam_tool] <defunct>
            ...
            {noformat}

            Configuration details:
            - Using sssd with ldap backend for mariadb service
            - OS: CentOS 8

            Logs (to make clear authentifaction itself works):
            {noformat}
            Dez 23 14:30:59 web1 mysqld[13717]: pam_sss(mariadb:auth): authentication success; logname= uid=27 euid=27 tty= ruser= rhost= user=web_<removed>
            Dez 23 14:31:01 web1 mysqld[13717]: pam_sss(mariadb:auth): authentication success; logname= uid=27 euid=27 tty= ruser= rhost= user=web_<removed>
            Dez 23 14:31:01 web1 mysqld[13717]: pam_sss(mariadb:auth): authentication success; logname= uid=27 euid=27 tty= ruser= rhost= user=web_<removed>
            {noformat}             		The authentication using the PAM v2 module works, but produces a lot of zombie processes.

            {noformat}
            $ ps aux | grep auth_pam_tool
            ...

            root 1637 0.0 0.0 0 0 ? Z Dez22 0:00 [auth_pam_tool] <defunct>
            root 1638 0.0 0.0 0 0 ? Z Dez22 0:00 [auth_pam_tool] <defunct>
            root 1639 0.0 0.0 0 0 ? Z Dez21 0:00 [auth_pam_tool] <defunct>
            root 1640 0.0 0.0 0 0 ? Z Dez21 0:00 [auth_pam_tool] <defunct>
            root 1641 0.0 0.0 0 0 ? Z Dez22 0:00 [auth_pam_tool] <defunct>
            root 1642 0.0 0.0 0 0 ? Z 08:21 0:00 [auth_pam_tool] <defunct>
            ...
            {noformat}

            Configuration details:
            - Using sssd with ldap backend for mariadb service
            - OS: CentOS 8

            Logs (to make clear authentifaction itself works):
            {noformat}
            Dez 23 14:30:59 web1 mysqld[13717]: pam_sss(mariadb:auth): authentication success; logname= uid=27 euid=27 tty= ruser= rhost= user=web_<removed>
            Dez 23 14:31:01 web1 mysqld[13717]: pam_sss(mariadb:auth): authentication success; logname= uid=27 euid=27 tty= ruser= rhost= user=web_<removed>
            Dez 23 14:31:01 web1 mysqld[13717]: pam_sss(mariadb:auth): authentication success; logname= uid=27 euid=27 tty= ruser= rhost= user=web_<removed>
            {noformat}


            /etc/pam.d/mariadb
            {noformat}
            auth required pam_sss.so domains=mariadb
            account required pam_sss.so domains=mariadb
            {noformat}
            elenst Elena Stepanova made changes -
            Labels need_feedback
            elenst Elena Stepanova made changes -
            Assignee Elena Stepanova [ elenst ] Sergei Golubchik [ serg ]
            serg Sergei Golubchik made changes -
            Assignee Sergei Golubchik [ serg ] Alexey Botchkov [ holyfoot ]
            GeoffMontee Geoff Montee (Inactive) made changes -
            Component/s Plugin - pam [ 10500 ]
            GeoffMontee Geoff Montee (Inactive) made changes -
            GeoffMontee Geoff Montee (Inactive) made changes -
            serg Sergei Golubchik made changes -
            Priority Major [ 3 ] Critical [ 2 ]
            serg Sergei Golubchik made changes -
            Fix Version/s 10.5 [ 23123 ]
            holyfoot Alexey Botchkov made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            holyfoot Alexey Botchkov made changes -
            Assignee Alexey Botchkov [ holyfoot ] Sergei Golubchik [ serg ]
            Status In Progress [ 3 ] In Review [ 10002 ]
            serg Sergei Golubchik made changes -
            Assignee Sergei Golubchik [ serg ] Alexey Botchkov [ holyfoot ]
            Status In Review [ 10002 ] Stalled [ 10000 ]
            holyfoot Alexey Botchkov made changes -
            issue.field.resolutiondate 2020-07-10 19:40:30.0 2020-07-10 19:40:30.852
            holyfoot Alexey Botchkov made changes -
            Fix Version/s 10.4.14 [ 24305 ]
            Fix Version/s 10.4 [ 22408 ]
            Fix Version/s 10.5 [ 23123 ]
            Resolution Fixed [ 1 ]
            Status Stalled [ 10000 ] Closed [ 6 ]
            mpflaum Maria M Pflaum (Inactive) made changes -
            sanja Oleksandr Byelkin made changes -
            Fix Version/s 10.5.5 [ 24423 ]
            serg Sergei Golubchik made changes -
            Workflow MariaDB v3 [ 102646 ] MariaDB v4 [ 157143 ]
            mariadb-jira-automation Jira Automation (IT) made changes -
            Zendesk Related Tickets 172177 130723 122545 161549

            People

              holyfoot Alexey Botchkov
              fbezdeka Florian Bezdeka
              Votes:
              5 Vote for this issue
              Watchers:
              16 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.