Hi George,
Could you do the following please ?
1) Compile negotiate_kerberos_auth with debug (i.e. with -g )
2) kinit user@DOMAIN
3) export KRB5_KTNAME=<squid.keytab>
4) run negotiate_kerberos_auth_test <squid-fqdn>
5) run gdb negotiate_kerberos_auth
6) on prompt type run -d
7) input YR <token> The token comes from 2) above
8) when crashed type where in gdb
send me the output please.
Thank you
Markus
Example (without crash):
./negotiate_kerberos_auth_test opensuse12.suse.home
Token:
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
gdb ./negotiate_kerberos_auth
GNU gdb (GDB) SUSE (7.5.1-2.1.1)
Copyright (C) 2012 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
<http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-suse-linux".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from
/src/bazaar/squid-3-bzr/trunk-comp/helpers/negotiate_auth/kerberos/negotiate_kerberos_auth...done.
(gdb) run -d
Starting program:
/src/bazaar/squid-3-bzr/trunk-comp/helpers/negotiate_auth/kerberos/negotiate_kerberos_auth
-d
Missing separate debuginfo for /lib64/ld-linux-x86-64.so.2
Try: zypper install -C
"debuginfo(build-id)=0a23c4e8300b31613d800697d835b384e921407e"
Missing separate debuginfo for /lib64/libcrypto.so.1.0.0
Try: zypper install -C
"debuginfo(build-id)=18a062c52abdd913e525fddb6fd147592888c314"
Missing separate debuginfo for /lib64/libcom_err.so.2
Try: zypper install -C
"debuginfo(build-id)=15ec626a4c628421c9c693fa21175a817f7f8976"
Missing separate debuginfo for /lib64/libcrypt.so.1
Try: zypper install -C
"debuginfo(build-id)=9ddd2ea1e6da3d0754648ecb0bf8b617d827f903"
Missing separate debuginfo for /lib64/libnsl.so.1
Try: zypper install -C
"debuginfo(build-id)=977d93583313f4913f08744dcc567b2ea95b5b58"
Missing separate debuginfo for /lib64/libresolv.so.2
Try: zypper install -C
"debuginfo(build-id)=5abb77d6cb67d9e36b97d842daba249e71b499d7"
Missing separate debuginfo for /lib64/libcap.so.2
Try: zypper install -C
"debuginfo(build-id)=54340dea9b3278365fbf8d9978a1cad518758975"
Missing separate debuginfo for /lib64/librt.so.1
Try: zypper install -C
"debuginfo(build-id)=c91b3d0735b49e2ccf493b8c91612978c783a732"
Missing separate debuginfo for /lib64/libdl.so.2
Try: zypper install -C
"debuginfo(build-id)=da368634ea211229f45d2f8d32e7da61800b4c75"
Missing separate debuginfo for /usr/lib64/libstdc++.so.6
Try: zypper install -C
"debuginfo(build-id)=babb0ba2913558a7b90bb6d23750a6a1885bfb59"
Missing separate debuginfo for /lib64/libm.so.6
Try: zypper install -C
"debuginfo(build-id)=24fba01931c773fd5b4688b34c4acde47ea77cb9"
Missing separate debuginfo for /lib64/libgcc_s.so.1
Try: zypper install -C
"debuginfo(build-id)=79056b80865c15deabba7b20155ea27c76d91bf1"
Missing separate debuginfo for /lib64/libpthread.so.0
Try: zypper install -C
"debuginfo(build-id)=ef5f5dbcb2398c608fef7884e1bfb65be3b5f0ef"
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Missing separate debuginfo for /lib64/libc.so.6
Try: zypper install -C
"debuginfo(build-id)=837f2459b5923578eb82a4b75b1f98a5faa08532"
Missing separate debuginfo for /lib64/libz.so.1
Try: zypper install -C
"debuginfo(build-id)=bef211df25174b1ba44958f0e7f8e301d59c8de5"
negotiate_kerberos_auth.cc(212): pid=20522 :2014/06/19 22:47:52|
negotiate_kerberos_auth: INFO: Starting version 3.0.4sq
YR
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
negotiate_kerberos_auth.cc(258): pid=20522 :2014/06/19 22:48:05|
negotiate_kerberos_auth: DEBUG: Got 'YR
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'
from squid (length: 911).
negotiate_kerberos_auth.cc(311): pid=20522 :2014/06/19 22:48:05|
negotiate_kerberos_auth: DEBUG: Decode
'YIICpQYGKwYBBQUCoIICmTCCApWgDTALBgkqhkiG9xIBAgKiggKCBIICfmCCAnoGCSqGSIb3EgECAgEAboICaTCCAmWgAwIBBaEDAgEOogcDBQAAAAAAo4IBUWGCAU0wggFJoAMCAQWhCxsJU1VTRS5IT01FoicwJaADAgEDoR4wHBsESFRUUBsUb3BlbnN1c2UxMi5zdXNlLmhvbWWjggEKMIIBBqADAgEXoQMCAQSigfkEgfZ+FQJ4tzhRiu8g4pxP4R2immonX9OBVKcnbqjPhHBOyChp95aOairKjCP6j4sM9GaHms90TgQwY8XsF0P1BtpgBO32QU8GSRpUNTE2z35+pGCiT3ijb+enmNV00F8mR192/UbeaUVi/vtsSW/H2J3M8zxO2QSWyXNHP3bx9zL4yzfJrXSgXVG+VniFw5Y26DE+QuD/bh6y17WAZtlm53yQ0vrb+nv//mO/Log6LdC31x3w5r+BNAEz7KnXy2bMGOZqWsEEqYAHzIJSeX+ZQ8+wclHeHXReAVARbaibHHAoo1RGfKaXH6S30drB2OiIphoD0SqfQG6kgfowgfegAwIBEKKB7wSB7AKg3c836y3NZpaI2tj4iPCbJqIE/XE4VMmWv5eoOBP6ZOZ/X1k3RFvEdCjFA/QXQ44CSJEv7Fqha05ipAGtx9A1mSDFC7jfFH2VsHlRRGm7GoSJQXetrzTO1bfnhvyB3q2qwYglZTo28BPvCrWUSFTeld1E5kwFUsBrf787dsY80ZXlHzz4S451uiwrpMaqx/sKjXZ3KFoqspLnk+z2IqWTm292tqG+3WDnDhTVL/Y1uZwjZWIUIVIQ9xeWBD1Zhj4Z25437JibOzNfqGn7gGUB4fGzTE7hdWyw/Wq4keKzWmSn+DFsN5I8TuHJ'
(decoded length: 681).
negotiate_kerberos_auth.cc(128): pid=20522 :2014/06/19 22:48:05|
negotiate_kerberos_auth: ERROR:
gsskrb5_extract_authz_data_from_sec_context() failed: Miscellaneous failure
(see text). Ticket have not authorization data of type 128
AF oRQwEqADCgEAoQsGCSqGSIb3EgECAg== markus@xxxxxxxxx
negotiate_kerberos_auth.cc(431): pid=20522 :2014/06/19 22:48:05|
negotiate_kerberos_auth: DEBUG: AF oRQwEqADCgEAoQsGCSqGSIb3EgECAg==
markus@xxxxxxxxx
QQ
negotiate_kerberos_auth.cc(258): pid=20522 :2014/06/19 22:48:08|
negotiate_kerberos_auth: DEBUG: Got 'QQ' from squid (length: 2).
BH quit command
[Inferior 1 (process 20522) exited normally]
(gdb) quit
"George Billios" wrote in message
news:E1Wxb2r-0002U0-PB@xxxxxxxxxxxxxxxxxxxxx...
On Thu, 19 Jun 2014 23:21:45 +1200, Amos Jeffries <squid3@xxxxxxxxxxxxx>
wrote:
On 19/06/2014 6:40 p.m., George Billios wrote:
> Hi,
>
> I'm trying to upgrade from 3.3.8 to 3.4.5 (3.4.x in general), compile
> squid with the same options (that are still valid in 3.4.x) and use
> negotiate authentication, but every time negotiate_kerberos_auth crashes
> with the following:
>
>
> 2014/06/18 23:06:20| negotiate_wrapper: Error reading Kerberos helper
> response
> 2014/06/18 23:06:20 kid1| WARNING: negotiateauthenticator #Hlpr0 exited
> 2014/06/18 23:06:21| negotiate_kerberos_auth: ERROR:
> krb5_pac_get_buffer: Invalid argument
> *** glibc detected *** /usr/libexec/negotiate_kerberos_auth: double free
> or corruption (fasttop): 0x000000000159af00 ***
> ======= Backtrace: =========
> /lib/libc.so.6(+0x71e16)[0x7f6bf3b3ae16]
> /lib/libc.so.6(cfree+0x6c)[0x7f6bf3b3fb8c]
> /usr/lib/libkrb5.so.3(krb5_free_data+0x12)[0x7f6bf54a3472]
> /usr/libexec/negotiate_kerberos_auth[0x4044e9]
> /usr/libexec/negotiate_kerberos_auth[0x40319c]
> /lib/libc.so.6(__libc_start_main+0xfd)[0x7f6bf3ae7c8d]
> /usr/libexec/negotiate_kerberos_auth[0x4018b9]
Do you have a trace that shows what the helper was doing?
From that trace it looks like simply calling the main() function and
linking to the library crashed it. None of that is Squid code, all OS
code, so ... ?!
Amos
I don't have a trace but I can probably enable all the debug options and get
one.
Even if this an OS issue what can trigger it since the helper from 3.3.8
works but the one from 3.4.x doesn't with the same libraries, same compile
options etc ? That is why I'm asking if something fundamental changed -
which from a quick look at the helper code I can say something has but I
don't have the programming skills to understand what exactly and how it
could create this issue.
In any case I'll come back with more debug info.
