[Auth_ldap] Seg fault

[Richard Stovall]

I am using Apache 1.3.29 and auth_ldap 1.6 to authenticate users in a MS
Active Directory domain.  I had it working just fine last week but when
I came in today suddenly it wasn't anymore.

If I set the authLDAPStartTLS directive to 'off' it works beautifully.
If I set it to 'on' then Apache craps out and whatever processes are
handling the request die off.  I am completely confused about why it
stopped working.

openssl=openssl-0.9.7a-2
openldap=2.0.27-8

I built the module with apxs last week and it was working fine.  Build
options for the module were as listed in the documentation.

Below is debug level output from the apache error log:

> Entering ldap_authenticate_basic_user
> Entering auth_ldap_find_connection
> authenticate: using URL
ldap://ads.domain.us:389/cn=Users,dc=domain,dc=us?sAMAccountName?sub?(ob
jectClass=*)
> authenticate: result is 401
> Entering ldap_authenticate_basic_user
> Entering auth_ldap_find_connection
> authenticate: using URL
ldap://ads.domain.us:389/cn=Users,dc=domain,dc=us?sAMAccountName?sub?(ob
jectClass=*)
> inserting
`ldap://ads.domain.us:389/cn=Users,dc=domain,dc=us?sAMAccountName?sub?(o
bjectClass=*)' into URL cache
> entry for `admin' is not in the cache
> Entering auth_ldap_connect_to_server
> Opening connection to ldap server(s) `ads.domain.us'
> LDAP OP: init
> Starting TLS for this connection
> Entering ldap_authenticate_basic_user
> authenticate: using URL
ldap://ads.domain.us:389/cn=Users,dc=domain,dc=us?sAMAccountName?sub?(ob
jectClass=*)
> inserting
`ldap://ads.domain.us:389/cn=Users,dc=domain,dc=us?sAMAccountName?sub?(o
bjectClass=*)' into URL cache
> entry for `admin' is not in the cache
> Entering auth_ldap_connect_to_server
> Opening connection to ldap server(s) `ads.domain.us'
> LDAP OP: init
> Starting TLS for this connection
> Entering ldap_authenticate_basic_user
> Entering auth_ldap_find_connection
> authenticate: using URL
ldap://ads.domain.us:389/cn=Users,dc=domain,dc=us?sAMAccountName?sub?(ob
jectClass=*)
> inserting
`ldap://ads.domain.us:389/cn=Users,dc=domain,dc=us?sAMAccountName?sub?(o
bjectClass=*)' into URL cache
> entry for `admin' is not in the cache
> Entering auth_ldap_connect_to_server
> Opening connection to ldap server(s) `ads.domain.us'
> LDAP OP: init
> Starting TLS for this connection
> Entering ldap_authenticate_basic_user
> Entering auth_ldap_find_connection
> authenticate: using URL
ldap://ads.domain.us:389/cn=Users,dc=domain,dc=us?sAMAccountName?sub?(ob
jectClass=*)
> {1943} inserting
`ldap://ads.domain.us:389/cn=Users,dc=domain,dc=us?sAMAccountName?sub?(o
bjectClass=*)' into URL cache
> entry for `admin' is not in the cache
> Entering auth_ldap_connect_to_server
> Opening connection to ldap server(s) `ads.domain.us'
> LDAP OP: init
> Starting TLS for this connection
> [notice] child pid 1940 exit signal Segmentation fault (11)
> [notice] child pid 1941 exit signal Segmentation fault (11)
> [notice] child pid 1942 exit signal Segmentation fault (11)
> [notice] child pid 1943 exit signal Segmentation fault (11)


I've removed the beginning part of each line to make the output more
readable and save space.

Anyone have any ideas?

Help!

Thanks,

RS