Hi Nick.
you have to do:
kinit <user>
export KRB5_KTNAME=<your squid keytab>
./squid_kerb_auth_test opensuse11.suse.home 1 | ./squid_kerb_auth_test
opensuse11.suse.home 1 |
valgrind --log-file=./squid_kerb_auth_test-1.val --leak-check=full --show-reachable=yes
-v ./squid_kerb_auth -d
2011/01/11 00:02:28| squid_kerb_auth_test: Warning: CONTINUE NEEDED
2011/01/11 00:02:32| squid_kerb_auth: Starting version 1.0.7
2011/01/11 00:02:33| squid_kerb_auth: Got 'YR
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'
from squid (length: 867).
2011/01/11 00:02:33| squid_kerb_auth: Decode
'YIICgwYGKwYBBQUCoIICdzCCAnOgHzAdBgkqhkiG9xIBAgIGBSsFAQUCBgkqhkiC9xIBAgKiggJOBIICSmCCAkYGCSqGSIb3EgECAgEAboICNTCCAjGgAwIBBaEDAgEOogcDBQAAAAAAo4IBXmGCAVowggFWoAMCAQWhCxsJU1VTRS5IT01FoicwJaADAgEDoR4wHBsESFRUUBsUb3BlbnN1c2UxMS5zdXNlLmhvbWWjggEXMIIBE6ADAgEXoQMCAQOiggEFBIIBAVkBH7tBQEAfdeqoNp5K9r6Jg3NMobaWe9iMq/eAXElk5qf5nUrco8givbP5B+oIMrP7FW+ePU4IkWhNU7zQIG4JV5biFm7LMAw6U4aUSGulbkip6FiqYLl7K0RNmm0RdKAuPr/I0c7d7dcj62nrdm3fMzfiJikC/cCZBEcuXKdOqW+CjdGMdofr0exBnpqyOZLQ1Jy3zihOat2EIACjLhWqMVXFF+Doka64LrpoyjlVE31VOATU0jukPiS5KHHOlifrDnqJrdiRIzXYELs9JK+RINcIk34d4kDzSYFsaGqciPQjFXYg9mk2D26HBEGv2KSIR8zpjTek5GTNVtM37q2OpIG5MIG2oAMCAReiga4EgatVME4159hVHy/ERTguimxDdNPX03YcpUnaUA9KJwK5WuKFlq0gMoGErJayoaZdyQ7kB84G5DBhbC+OWviAWN8C0GShoFfOXocxO4aHvECJ6krY2ol3jo+iMFzqg04KRY8TFY0oZCbRXdQfF4FVgUkHopgswEJFleQFwJvwIfFulYI+Qe8TYeInXz5aYoaTX9o2gdyAjhFuGustTvxWJJj/7TLTUEc4XWrPG6c='
(decoded length: 647).
AF oRQwEqADCgEAoQsGCSqGSIb3EgECAg== markus@xxxxxxxxx
2011/01/11 00:02:34| squid_kerb_auth: AF oRQwEqADCgEAoQsGCSqGSIb3EgECAg==
markus@xxxxxxxxx
2011/01/11 00:02:34| squid_kerb_auth: Got 'QQ' from squid (length: 2).
BH quit command
Use valgrind only for squid_kerb_auth not for squid\-kerb_auth_test.
squid_kerb_auth_test-1.val shouldn't show any lost bytes under LEAK.
BTW what does the memory usage of the squid_kerb_auth processes give you ?
Markus
"Nick Cairncross" <Nick.Cairncross@xxxxxxxxxxxxxxx> wrote in message
news:C950B3A4.13CEC%nick.cairncross@xxxxxxxxxxxxxxxxxx
Can you look at the memory usage of the helper. I am aware of some
underlying Kerberos library memory leaks.
Hi Markus,
I've not used valgrind before, but I think I've run it correctly using the
following:
Kinit [user]
valgrind /usr/lib/squid/squid_kerb_auth_test test-proxy1.fqdn 1 | valgrind
--log-file=/root/Desktop/squid_kerb_auth_test-1.val --leak-check=full
--show-reachable=yes -v /usr/lib/squid/squid_kerb_auth -d
Results of log file at end of this post. However, the output (not in the
logfile) on screen during the run differs..
[TOKEN]
BH Invalid request
==21474==
==21474== HEAP SUMMARY:
==21474== in use at exit: 8,419 bytes in 130 blocks
==21474== total heap usage: 1,546 allocs, 1,416 frees, 204,494 bytes
allocated
==21474==
==21474== LEAK SUMMARY:
==21474== definitely lost: 1,776 bytes in 2 blocks
==21474== indirectly lost: 17 bytes in 2 blocks
==21474== possibly lost: 0 bytes in 0 blocks
==21474== still reachable: 6,626 bytes in 126 blocks
==21474== suppressed: 0 bytes in 0 blocks
==21474== Rerun with --leak-check=full to see details of leaked memory
==21474==
==21474== For counts of detected and suppressed errors, rerun with: -v
==21474== ERROR SUMMARY: 0 errors from 0 contexts (suppressed: 25 from 10)
BH input error
You have new mail in /var/spool/mail/root
Regards,
Nick
==21105== Memcheck, a memory error detector
==21105== Copyright (C) 2002-2009, and GNU GPL'd, by Julian Seward et al.
==21105== Using Valgrind-3.5.0 and LibVEX; rerun with -h for copyright info
==21105== Command: /usr/lib/squid/squid_kerb_auth -d
==21105== Parent PID: 19963
==21105==
--21105--
--21105-- Valgrind options:
--21105-- --log-file=/root/Desktop/squid_kerb_auth_test-1.val
--21105-- --leak-check=full
--21105-- --show-reachable=yes
--21105-- -v
--21105-- Contents of /proc/version:
--21105-- Linux version 2.6.18-194.26.1.el5PAE
(mockbuild@xxxxxxxxxxxxxxxxxxxxxxxxxxxx) (gcc version 4.1.2 20080704 (Red
Hat 4.1.2-48)) #1 SMP Fri Oct 29 14:28:58 EDT 2010
--21105-- Arch and hwcaps: X86, x86-sse1-sse2
--21105-- Page sizes: currently 4096, max supported 4096
--21105-- Valgrind library directory: /usr/lib/valgrind
--21105-- Reading syms from /lib/ld-2.5.so (0x531000)
--21105-- Reading syms from /usr/lib/squid/squid_kerb_auth (0x8048000)
--21105-- Reading syms from /usr/lib/valgrind/memcheck-x86-linux
(0x38000000)
--21105-- object doesn't have a dynamic symbol table
--21105-- Reading suppressions file: /usr/lib/valgrind/default.supp
--21105-- REDIR: 0x546730 (index) redirected to 0x3803e483
(vgPlain_x86_linux_REDIR_FOR_index)
--21105-- Reading syms from /usr/lib/valgrind/vgpreload_core-x86-linux.so
(0x4001000)
--21105-- Reading syms from
/usr/lib/valgrind/vgpreload_memcheck-x86-linux.so (0x4003000)
==21105== WARNING: new redirection conflicts with existing -- ignoring it
--21105-- new: 0x00546730 (index ) R-> 0x04006640 index
--21105-- REDIR: 0x5468d0 (strlen) redirected to 0x4006820 (strlen)
--21105-- Reading syms from /usr/lib/libgssapi_krb5.so.2.2 (0x2cc000)
--21105-- object doesn't have a symbol table
--21105-- Reading syms from /usr/lib/libkrb5.so.3.3 (0x229000)
--21105-- object doesn't have a symbol table
--21105-- Reading syms from /usr/lib/libk5crypto.so.3.1 (0x200000)
--21105-- object doesn't have a symbol table
--21105-- Reading syms from /lib/libcom_err.so.2.1 (0xdc6000)
--21105-- object doesn't have a symbol table
--21105-- Reading syms from /lib/libc-2.5.so (0x550000)
--21105-- Reading syms from /usr/lib/libkrb5support.so.0.1 (0x2c1000)
--21105-- object doesn't have a symbol table
--21105-- Reading syms from /lib/libdl-2.5.so (0x6d6000)
--21105-- Reading syms from /lib/libkeyutils-1.2.so (0xdfb000)
--21105-- object doesn't have a symbol table
--21105-- Reading syms from /lib/libresolv-2.5.so (0xdcb000)
--21105-- Reading syms from /lib/libselinux.so.1 (0x718000)
--21105-- object doesn't have a symbol table
--21105-- Reading syms from /lib/libsepol.so.1 (0x732000)
--21105-- object doesn't have a symbol table
--21105-- REDIR: 0x5c06a0 (rindex) redirected to 0x4006550 (rindex)
--21105-- REDIR: 0x5bbe30 (malloc) redirected to 0x400587e (malloc)
--21105-- REDIR: 0x5c1040 (memchr) redirected to 0x40069f0 (memchr)
--21105-- REDIR: 0x5c1a30 (memcpy) redirected to 0x4007a70 (memcpy)
--21105-- REDIR: 0x5c0300 (strlen) redirected to 0x4006800 (strlen)
--21105-- REDIR: 0x5b9990 (free) redirected to 0x4005498 (free)
--21105-- REDIR: 0x5c15a0 (mempcpy) redirected to 0x40072d0 (mempcpy)
--21105-- REDIR: 0x5bc2a0 (realloc) redirected to 0x400592d (realloc)
--21105-- REDIR: 0x5c1540 (memset) redirected to 0x4006b80 (memset)
--21105-- REDIR: 0x5bfc30 (index) redirected to 0x40065e0 (index)
--21105-- REDIR: 0x5bfe10 (strcpy) redirected to 0x4007d00 (strcpy)
--21105-- REDIR: 0x5bfda0 (strcmp) redirected to 0x40068d0 (strcmp)
--21105-- REDIR: 0x5c23b0 (strchrnul) redirected to 0x4006c60 (strchrnul)
--21105-- REDIR: 0x5c04f0 (strncmp) redirected to 0x4006860 (strncmp)
--21105-- REDIR: 0x5c05f0 (strncpy) redirected to 0x4007be0 (strncpy)
--21105-- REDIR: 0x5c1730 (stpcpy) redirected to 0x4007550 (stpcpy)
--21105-- REDIR: 0x5bbaf0 (calloc) redirected to 0x4004b8e (calloc)
--21105-- Reading syms from /lib/libnss_files-2.5.so (0x4419000)
--21105-- REDIR: 0x5c22e0 (rawmemchr) redirected to 0x4006c90 (rawmemchr)
--21105-- Discarding syms at 0x441a8e0-0x4421284 in
/lib/libnss_files-2.5.so due to munmap()
==21105==
==21105== HEAP SUMMARY:
==21105== in use at exit: 35 bytes in 1 blocks
==21105== total heap usage: 113 allocs, 112 frees, 14,259 bytes allocated
==21105==
==21105== Searching for pointers to 1 not-freed blocks
==21105== Checked 159,936 bytes
==21105==
==21105== 35 bytes in 1 blocks are still reachable in loss record 1 of 1
==21105== at 0x4005903: malloc (vg_replace_malloc.c:195)
==21105== by 0x8049438: main (squid_kerb_auth.c:297)
==21105==
==21105== LEAK SUMMARY:
==21105== definitely lost: 0 bytes in 0 blocks
==21105== indirectly lost: 0 bytes in 0 blocks
==21105== possibly lost: 0 bytes in 0 blocks
==21105== still reachable: 35 bytes in 1 blocks
==21105== suppressed: 0 bytes in 0 blocks
==21105==
==21105== ERROR SUMMARY: 0 errors from 0 contexts (suppressed: 24 from 10)
--21105--
--21105-- used_suppression: 24 dl-hack3
==21105==
==21105== ERROR SUMMARY: 0 errors from 0 contexts (suppressed: 24 from 10)
The information contained in this e-mail is of a confidential nature and is
intended only for the addressee. If you are not the intended addressee, any
disclosure, copying or distribution by you is prohibited and may be
unlawful. Disclosure to any party other than the addressee, whether
inadvertent or otherwise, is not intended to waive privilege or
confidentiality. Internet communications are not secure and therefore Conde
Nast does not accept legal responsibility for the contents of this message.
Any views or opinions expressed are those of the author.
The Conde Nast Publications Ltd (No. 226900), Vogue House, Hanover Square,
London W1S 1JU
