[squid-users] Re: upgrading from 3.3.8 to 3.4.5 crashes negotiate_kerberos_auth

Hi George,

   Could you do the following please ?

   1) Compile negotiate_kerberos_auth with debug (i.e. with -g )
   2) kinit user_at_DOMAIN
   3) export KRB5_KTNAME=<squid.keytab>
   4) run negotiate_kerberos_auth_test <squid-fqdn>
   5) run gdb negotiate_kerberos_auth
   6) on prompt type run -d
   7) input YR <token> The token comes from 2) above
   8) when crashed type where in gdb

send me the output please.

Thank you
Markus

Example (without crash):

> ./negotiate_kerberos_auth_test opensuse12.suse.home
Token:
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

> gdb ./negotiate_kerberos_auth
GNU gdb (GDB) SUSE (7.5.1-2.1.1)
Copyright (C) 2012 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
<http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-suse-linux".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from
/src/bazaar/squid-3-bzr/trunk-comp/helpers/negotiate_auth/kerberos/negotiate_kerberos_auth...done.
(gdb) run -d
Starting program:
/src/bazaar/squid-3-bzr/trunk-comp/helpers/negotiate_auth/kerberos/negotiate_kerberos_auth
 -d
Missing separate debuginfo for /lib64/ld-linux-x86-64.so.2
Try: zypper install -C
"debuginfo(build-id)=0a23c4e8300b31613d800697d835b384e921407e"
Missing separate debuginfo for /lib64/libcrypto.so.1.0.0
Try: zypper install -C
"debuginfo(build-id)=18a062c52abdd913e525fddb6fd147592888c314"
Missing separate debuginfo for /lib64/libcom_err.so.2
Try: zypper install -C
"debuginfo(build-id)=15ec626a4c628421c9c693fa21175a817f7f8976"
Missing separate debuginfo for /lib64/libcrypt.so.1
Try: zypper install -C
"debuginfo(build-id)=9ddd2ea1e6da3d0754648ecb0bf8b617d827f903"
Missing separate debuginfo for /lib64/libnsl.so.1
Try: zypper install -C
"debuginfo(build-id)=977d93583313f4913f08744dcc567b2ea95b5b58"
Missing separate debuginfo for /lib64/libresolv.so.2
Try: zypper install -C
"debuginfo(build-id)=5abb77d6cb67d9e36b97d842daba249e71b499d7"
Missing separate debuginfo for /lib64/libcap.so.2
Try: zypper install -C
"debuginfo(build-id)=54340dea9b3278365fbf8d9978a1cad518758975"
Missing separate debuginfo for /lib64/librt.so.1
Try: zypper install -C
"debuginfo(build-id)=c91b3d0735b49e2ccf493b8c91612978c783a732"
Missing separate debuginfo for /lib64/libdl.so.2
Try: zypper install -C
"debuginfo(build-id)=da368634ea211229f45d2f8d32e7da61800b4c75"
Missing separate debuginfo for /usr/lib64/libstdc++.so.6
Try: zypper install -C
"debuginfo(build-id)=babb0ba2913558a7b90bb6d23750a6a1885bfb59"
Missing separate debuginfo for /lib64/libm.so.6
Try: zypper install -C
"debuginfo(build-id)=24fba01931c773fd5b4688b34c4acde47ea77cb9"
Missing separate debuginfo for /lib64/libgcc_s.so.1
Try: zypper install -C
"debuginfo(build-id)=79056b80865c15deabba7b20155ea27c76d91bf1"
Missing separate debuginfo for /lib64/libpthread.so.0
Try: zypper install -C
"debuginfo(build-id)=ef5f5dbcb2398c608fef7884e1bfb65be3b5f0ef"
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Missing separate debuginfo for /lib64/libc.so.6
Try: zypper install -C
"debuginfo(build-id)=837f2459b5923578eb82a4b75b1f98a5faa08532"
Missing separate debuginfo for /lib64/libz.so.1
Try: zypper install -C
"debuginfo(build-id)=bef211df25174b1ba44958f0e7f8e301d59c8de5"
negotiate_kerberos_auth.cc(212): pid=20522 :2014/06/19 22:47:52|
negotiate_kerberos_auth: INFO: Starting version 3.0.4sq
YR
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
negotiate_kerberos_auth.cc(258): pid=20522 :2014/06/19 22:48:05|
negotiate_kerberos_auth: DEBUG: Got 'YR
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'
from squid (length: 911).
negotiate_kerberos_auth.cc(311): pid=20522 :2014/06/19 22:48:05|
negotiate_kerberos_auth: DEBUG: Decode
'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'
(decoded length: 681).
negotiate_kerberos_auth.cc(128): pid=20522 :2014/06/19 22:48:05|
negotiate_kerberos_auth: ERROR:
gsskrb5_extract_authz_data_from_sec_context() failed: Miscellaneous failure
(see text). Ticket have not authorization data of type 128
AF oRQwEqADCgEAoQsGCSqGSIb3EgECAg== markus_at_SUSE.HOME
negotiate_kerberos_auth.cc(431): pid=20522 :2014/06/19 22:48:05|
negotiate_kerberos_auth: DEBUG: AF oRQwEqADCgEAoQsGCSqGSIb3EgECAg==
markus_at_SUSE.HOME
QQ
negotiate_kerberos_auth.cc(258): pid=20522 :2014/06/19 22:48:08|
negotiate_kerberos_auth: DEBUG: Got 'QQ' from squid (length: 2).
BH quit command
[Inferior 1 (process 20522) exited normally]
(gdb) quit

"George Billios" wrote in message
news:E1Wxb2r-0002U0-PB_at_rmm6prod02.runbox.com...

On Thu, 19 Jun 2014 23:21:45 +1200, Amos Jeffries <squid3_at_treenet.co.nz>
wrote:

> On 19/06/2014 6:40 p.m., George Billios wrote:
> > Hi,
> >
> > I'm trying to upgrade from 3.3.8 to 3.4.5 (3.4.x in general), compile
> > squid with the same options (that are still valid in 3.4.x) and use
> > negotiate authentication, but every time negotiate_kerberos_auth crashes
> > with the following:
> >
> >
> > 2014/06/18 23:06:20| negotiate_wrapper: Error reading Kerberos helper
> > response
> > 2014/06/18 23:06:20 kid1| WARNING: negotiateauthenticator #Hlpr0 exited
> > 2014/06/18 23:06:21| negotiate_kerberos_auth: ERROR:
> > krb5_pac_get_buffer: Invalid argument
> > *** glibc detected *** /usr/libexec/negotiate_kerberos_auth: double free
> > or corruption (fasttop): 0x000000000159af00 ***
> > ======= Backtrace: =========
> > /lib/libc.so.6(+0x71e16)[0x7f6bf3b3ae16]
> > /lib/libc.so.6(cfree+0x6c)[0x7f6bf3b3fb8c]
> > /usr/lib/libkrb5.so.3(krb5_free_data+0x12)[0x7f6bf54a3472]
> > /usr/libexec/negotiate_kerberos_auth[0x4044e9]
> > /usr/libexec/negotiate_kerberos_auth[0x40319c]
> > /lib/libc.so.6(__libc_start_main+0xfd)[0x7f6bf3ae7c8d]
> > /usr/libexec/negotiate_kerberos_auth[0x4018b9]
>
>
> Do you have a trace that shows what the helper was doing?
>
> From that trace it looks like simply calling the main() function and
> linking to the library crashed it. None of that is Squid code, all OS
> code, so ... ?!
>
> Amos

I don't have a trace but I can probably enable all the debug options and get
one.

Even if this an OS issue what can trigger it since the helper from 3.3.8
works but the one from 3.4.x doesn't with the same libraries, same compile
options etc ? That is why I'm asking if something fundamental changed -
which from a quick look at the helper code I can say something has but I
don't have the programming skills to understand what exactly and how it
could create this issue.

In any case I'll come back with more debug info.
Received on Thu Jun 19 2014 - 21:50:31 MDT