Bug#611614: libapache2-mod-shib2: /etc/init.d/shibd removes pidfile before (unsuccesful) attept to stop daemon

Gabor Kiss kissg at ssg.ki.iif.hu
Mon Jan 31 09:44:43 UTC 2011

Package: libapache2-mod-shib2
Version: 2.3.1+dfsg-4
Severity: minor

/etc/init.d/shibd script malfunctions when stopping or restarting shibd.
Function prepare_environment() is always called and it starts
su -s /usr/sbin/shibd _shibd -- -t -f -c /etc/shibboleth/shibboleth2.xml -p /var/run/shibboleth/shibd.pid -w 30
Unfortunately this action leads to early removal of pidfile therefore
start-stop-daemon --stop --quiet --pidfile $PIDFILE --exec $DAEMON
fails and does not stop shibd.


-- System Information:
Debian Release: 6.0
  APT prefers testing-proposed-updates
  APT policy: (500, 'testing-proposed-updates'), (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages libapache2-mod-shib2 depends on:
ii  adduser                     3.112+nmu2   add and remove users and groups
ii  libc6                       2.11.2-10    Embedded GNU C Library: Shared lib
ii  libgcc1                     1:4.4.5-8    GCC support library
ii  liblog4cpp5                 1.0-4        C++ library for flexible logging (
ii  libsaml6                    2.3-2+b1     Security Assertion Markup Language
ii  libshibsp4                  2.3.1+dfsg-4 Federated web single sign-on syste
ii  libstdc++6                  4.4.5-8      The GNU Standard C++ Library v3
ii  libxerces-c3.1              3.1.1-1+b1   validating XML parser library for 
ii  libxml-security-c15         1.5.1-3      C++ library for XML Digital Signat
ii  libxmltooling4              1.3.3-2      C++ XML parsing library with encry
ii  unixodbc                    2.2.14p2-1   ODBC tools libraries

Versions of packages libapache2-mod-shib2 recommends:
ii  apache2                       2.2.16-6   Apache HTTP Server metapackage
ii  apache2-mpm-prefork [apache2] 2.2.16-6   Apache HTTP Server - traditional n
ii  openssl                       0.9.8o-4   Secure Socket Layer (SSL) binary a

libapache2-mod-shib2 suggests no packages.

-- Configuration Files:
/etc/shibboleth/shibboleth2.xml changed [not included]

-- no debconf information

More information about the Pkg-shibboleth-devel mailing list