Re: [squid-users] Re: upgrading from 3.3.8 to 3.4.5 crashes negotiate_kerberos_auth

That did the work Markus, thanks.

Now it doesn't crash but I still get lots of in the log files

negotiate_kerberos_auth: ERROR: krb5_pac_get_buffer: Invalid argument

It seems to happen if the token is "old". Any ideas where this comes from ?

-------- Original Message --------
Subject: [squid-users] Re: upgrading from 3.3.8 to 3.4.5 crashes
negotiate_kerberos_auth
From: Markus Moeller <huaraz_at_moeller.plus.com>
To: squid-users_at_squid-cache.org
Date: 22/06/14 13:35
> Hi George,
>
> There might be another reason for the crash. Could you first try to
> replace on line 358 of negotiate_kerberos_pac.cc
>
> ad_data = (krb5_data *)xmalloc(sizeof(krb5_data));
>
> with
>
> ad_data = (krb5_data *)xcalloc(1,sizeof(krb5_data));
>
> Regards
> Markus
>
> "Markus Moeller" wrote in message news:lo4dqj$22m$1_at_ger.gmane.org...
>
> Hi George,
>
> I see now the cause. The Kerberos function krb5_free_data does not
> check for NULL pointer before freeing. Here is a work around replace
> krb5_free_data with:
>
> if (ad_data) {
> if (ad_data->data)
> free(ad_data->data);
> free(ad_data);
> }
> /* krb5_free_data(context, ad_data);*/
>
> Regards
> Markus
>
> "George Billios" wrote in message
> news:E1WyEa5-0000Gq-6P_at_rmm6prod02.runbox.com...
>
> Here is the output:
>
> (gdb) where
> #0 0x00007ffff5f911b5 in *__GI_raise (sig=<value optimized out>) at
> ../nptl/sysdeps/unix/sysv/linux/raise.c:64
> #1 0x00007ffff5f93fc0 in *__GI_abort () at abort.c:92
> #2 0x00007ffff5fc75bb in __libc_message (do_abort=<value optimized out>,
> fmt=<value optimized out>) at ../sysdeps/unix/sysv/linux/libc_fatal.c:189
> #3 0x00007ffff5fd0e16 in malloc_printerr (action=3, str=0x7ffff6088748
> "double free or corruption (fasttop)", ptr=<value optimized out>)
> at malloc.c:6267
> #4 0x00007ffff5fd5b8c in *__GI___libc_free (mem=<value optimized
> out>) at
> malloc.c:3739
> #5 0x00007ffff7939472 in krb5_free_data (context=<value optimized out>,
> val=0x6171f0) at ../../../../src/lib/krb5/krb/kfree.c:253
> #6 0x00000000004051a4 in get_ad_groups (ad_groups=0x7fffffffaff0 "",
> context=0x60f9e0, pac=0x0) at negotiate_kerberos_pac.cc:464
> #7 0x0000000000403265 in main (argc=5, argv=0x7fffffffe0e8) at
> negotiate_kerberos_auth.cc:419
>
>
> BR,
> George
>
> On Fri, 20 Jun 2014 19:11:27 +0100, "Markus Moeller"
> <huaraz_at_moeller.plus.com> wrote:
>
>> Can you type where at the gdb prompt after the crash. It should list the
>> function and location
>>
>> Markus
>>
>> "George Billios" wrote in message
>> news:E1WxwKo-0000H9-CJ_at_rmm6prod02.runbox.com...
>>
>> So I tried to compile with -g and follow your instructions, here is
>> what I
>> get:
>>
>> YR
>> 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
>>
> 5iJzpnMsI+TyRjGqDwfQ4zxlpaZH3bERnGrsns3WoB4hKSz5UIYE4lygoImJmE6VGykVSayXXwtR2uME8S62lDeDfiRlUQj47DEeHX5QI+I67LJx4qbZOn7HntPKMkp3SVucXiudn8BD1C07+6O3tim2sctbOkAFQ0IqQ7d0+QDFfYBdW9+sXB02pf0GDwrVmT0LzoZJD7liCmNv1fX3ZC2yHHVTDfERSXl5B+1NaLbLrRWfxXqSt4/qre5DR8YDVtcC5rmXGYd1mTAvYALzf+aM9RlMUgt0S6lbbFJiXMry55D69Puo3vqEMtOVKlf9GvQFXpLT5QU4ZUT152Lm+bMH9H5qvbdgW/4RoNr1L4GBojffm30qCS2LPS7gn52/Fk7mjbpt0TuFnoDWNV9fWcS44Frvi0fFXk/y3ALgFw5YpD1YE0uPP9s6B2BVm39TuSu6jboITgzLmHJgS7LSO1XTEiP6EfR9zWkmkp1Alt1PChhxzUPomfZA60hvtms50jj4+F9B3lmCg2BOl8YkItqQV+tRApRRznDxrNVfDvhsAJGrTXOHwW6/xvyysxa6S6fS2cljoHLCuNcbk7UC0rkKoOrHxsuqXFtPg5WpoDcOrqD9A1ZcKW3E653C+BelYK0aYitkPsRFHb3qRkti5DeJZF0QBKopCv5dX7VuCn0y/UaNVSnqEHKHgRkFvYnpvAPb1K8IU94Dl8uG3iwU/mOniQEuBT8/IEH+K3fhHFKR/MVBBsCnlgRXfuiiwBzWLTvLLEjvhU2nRFENEoaZ+DjCSO1GPI
>
> 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
>
> EhvhhWQ4yoezEtSD94HD8H7Fw8RE8Cvb3jozITneld3+dNh9sDmIlclufiLHv8wJs8fMNrEc7MSx2c5sLllD8fj/gk9aHtCAgRyMjWiGUygDP0pPjTeMgJ1p3DfExJViwK31Qdm7rKQIYv72LTl/hoKgaeKyNIMdBYBa8NsjRYVm2Mmaz1zIUcw+RjGlSiuUDa8+TBn8DPwiOqe7sjPU5BCZW6Ry9UIgHCRD6iWoBvcKGdAxCxUwc+D2zMZI8FmaqxPj1Je/dnyj1+CxJOOJRzBhx2Lo+TQag3VR+LNFDDjv1cAeD/gu2Ox2zgZWl/kMonslp0OWjC+JPIDYnBjAefOd5N+XAM3tHO/X0kfeA0DJd/q4WD5E9QzMrsq20rtK0GA3LeCWhblsGOxCtcy+lk9s8hAFcjt+Z6jqu3ZtPOQtGhbFo1PzvvMRo1eOm86Sf2/KL83c7XjalCG60Gn3lptElcT8UQjKf9/jThrmx3zkiIS1rtvkyCOtt4vdeZVxbHKgX1xaNQuwFRKGsizzZ80ZYZaZLRP6pQK/xVVvlH3BJaBfERu+HJxx1dr3SrOsylG8z4xDAciWBXE6IRm4bq29qlNipkCBTWU9IPpXlRyB+Xf244o6yfX6tedoWTc9UXeAEJNRuBTWOlV7ex0l0JhbVxqMYAp7f06VlzYLz8iRZtbxi+zRhThlTbzu8X99+fdq07lWP+N6fbbAVkg8oG5zxWXYjS4/N2UFy3wRrXSzy4iWa9q+P4C9gl7DZwLjumwhK47vJ6QQfGRWsbFCWZz7SK3eyS
>
> hZ8NxcQf5C5P6NAPI0sa98C1ptGD1L2/n6T5msmXMFt+0faBu9SDet4v90ZeKkouLfjz1Ch4Ys9pzIx3rgTWp/CvKtm0WEMyl1WfVgHcP0qy2iF5bcdrO/LYx/YPCBJkPLIApheBIrhrFdZRtl1pfqCAUBhXuNJwPdTAXwhGMHyWxnW50WeyNM/S0qBg9peJOxgs/K33gYjbf7Hx7+1VFaAsKMo5haMy4HAWQgikgdcwgdSgAwIBEqKBzASByXRsQMGlR7xJj3YErRJUW0byE91n7GvpOfmTSurBOD6W2fiYFcNlsU6WMNi3GOwuj4zqHdOP/g5YITVzFgWAtaGMbNznVqLY/6xfTIa3V1ASFLceLHa3slyWVW+DHyM8LKk1vw6SRcOapT9bXKP+/IL8vpV6gr9aprwLNpi6ri0vqOXniDpge3jirHQdQqeFYGpgX3+MmBcTFB0+pxJ4riB61v6CRjotBhLsQ8nBoDBJ87xNTkfd9GbvfKpgoHnpYtLZM24qVNzGvw==
>
>> negotiate_kerberos_auth.cc(258): pid=10942 :2014/06/20 13:41:46|
>> negotiate_kerberos_auth: DEBUG: Got 'YR
>> YIIK3QYGKwYBBQUCoIIK0TCCCs2gHzAdBgkqhkiG9xIBAgIGBSsFAQUCBgkqhkiC9xIBAgKiggqoBIIKpGCCCqAGCSqGSIb3EgECAgEAboIKjzCCCougAwIBBaEDAgEOogcDBQAAAAAAo4IJmmGCCZYwggmSoAMCAQWhExsRR1IwMDEuU0lFTUVOUy5ORVSiLjAsoAMCAQOhJTAjGwRIVFRQGxtwcm94eS1hcnQuZ3IwMDEuc2llbWVucy5uZXSjgglEMIIJQKADAgESoQMCAQWiggkyBIIJLsB+VwJfASUmAV/I5QRhC/TkUfvuAlO+XGudZV/dSrHW8lkmTPbu2Qb3mZNALU9do+dqSX+HVnIpI3Zm/mG6Tvvq3It48ruvilQXNvwVXmA4B13Vb6B+929lLxpMY+qKG7Y7CrW1RXeu9i6VQwXbEZIFKXf9sUolhruLLZ2lQBm1VRNvMYpyR2hIGG6cGimZjWxNgIrTZyI1aEuP5Xxv9ffdODzZvZsedLTJ3EW44mOsJKKJY1yq6BASxtHS7KNRJtspelgt28vtgfCNEwFDH9pgbOvf+o1xXVGmX6tjkXkYAqH6mzfBIRlyZL1jJRxcWa6ZJyz6Rzon3h1xXeVM58kv9eo1DT2VNPouMyVbBszssC0zuYRMByoWjPwC+CyzZv2AAhw4WuuOZZpcvo8NALMm+8KMsLQCjvohIyN3DtVICp8Y5xsKGGVdPz9eRHHZZ4uDzy4ULya8ek0zukoGruqiPpjG0VPfVE1EckBbCsy9nrvBWvM/h7ulcR+iFB
>>
> 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
>
> E9yLFAjfr2NbgeHMFLNPVTCMqZsT7mtsCO1wCROwiQdozKb+XULZIA3exv1ua9H8914AVdLFpHYK9yMbxO/pNI6W+cJ03mgu/7vIzbq9QDd6hI9bjh7cuzqhr8CLW2XfI9lueqRWv3BjwCbCwB4hUHid5OcamPjXZbrgVyt+msRlwHlBq9Enj8Cc5+7rd/P6ZPmsNzUpzaO2d/3ELPcTepcTQt48EP05khy+wlDzEfcf/Uyau92ojBSOTsXUxW4ecfEKl8uSYUM/s9vmeqG/3ehbkhwDiFmCQcmo2/u4ZMUsSATHDcU4wXwFazButTIBwKAZyKa9tEIgFCZW+M49C0Glpd7SnzGX/9DSk/y+lLYuBmcXBfZidFOiAqlCRcxja3oj+D7vWuXwus4LA5c4/UnOzDS6rEA4L2THms8Ys9Mzzy22/ANuf21klxJpCpY3gk7C+MmheqM4BZ4lDGPuwqBF1N4mvKCnEWl5NJ7pt6XFMWBoIueL1D0gHtOSDM044ca+bUjUTAcfdsbWIne19vrTMDRzTZOISkuAithlwZH/X1UZ6P0hygDeae4hNbB/H2KLyYuatb/XYssWHJwUvls9ixRjq+8KJZevcY6iBpiuISHRTVKO0VJhrwhjp+C8odGb0jdTrx5of5nEh4nQUh6OkjuK9cTnVb0uuBdxemv4JcQZtYXuiH9k9bwGAH4iq0BNo7qibi+WjkbSg4D3Mio0iPlJ8r6h49ChrbEtzJyx4xLZ5lV5AtMhQcKPcEdDpE9tjMQhvnWq6rJLyo8+uZFxr6G+/A
>
> EhvhhWQ4yoezEtSD94HD8H7Fw8RE8Cvb3jozITneld3+dNh9sDmIlclufiLHv8wJs8fMNrEc7MSx2c5sLllD8fj/gk9aHtCAgRyMjWiGUygDP0pPjTeMgJ1p3DfExJViwK31Qdm7rKQIYv72LTl/hoKgaeKyNIMdBYBa8NsjRYVm2Mmaz1zIUcw+RjGlSiuUDa8+TBn8DPwiOqe7sjPU5BCZW6Ry9UIgHCRD6iWoBvcKGdAxCxUwc+D2zMZI8FmaqxPj1Je/dnyj1+CxJOOJRzBhx2Lo+TQag3VR+LNFDDjv1cAeD/gu2Ox2zgZWl/kMonslp0OWjC+JPIDYnBjAefOd5N+XAM3tHO/X0kfeA0DJd/q4WD5E9QzMrsq20rtK0GA3LeCWhblsGOxCtcy+lk9s8hAFcjt+Z6jqu3ZtPOQtGhbFo1PzvvMRo1eOm86Sf2/KL83c7XjalCG60Gn3lptElcT8UQjKf9/jThrmx3zkiIS1rtvkyCOtt4vdeZVxbHKgX1xaNQuwFRKGsizzZ80ZYZaZLRP6pQK/xVVvlH3BJaBfERu+HJxx1dr3SrOsylG8z4xDAciWBXE6IRm4bq29qlNipkCBTWU9IPpXlRyB+Xf244o6yfX6tedoWTc9UXeAEJNRuBTWOlV7ex0l0JhbVxqMYAp7f06VlzYLz8iRZtbxi+zRhThlTbzu8X99+fdq07lWP+N6fbbAVkg8oG5zxWXYjS4/N2UFy3wRrXSzy4iWa9q+P4C9gl7DZwLjumwhK47vJ6QQfGRWsbFCWZz7SK3eyS
>
> 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'
>
>> from squid (length: 3719).
>> negotiate_kerberos_auth.cc(311): pid=10942 :2014/06/20 13:41:46|
>> negotiate_kerberos_auth: DEBUG: Decode
>> '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
>>
> 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
>
> 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
>
> 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
>
> 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'
>
>> (decoded length: 2785).
>> negotiate_kerberos_pac.cc(50): pid=10942 :2014/06/20 13:41:46|
>> negotiate_kerberos_auth: ERROR: krb5_pac_get_buffer failed: Invalid
>> argument
>> 2014/06/20 13:41:46| negotiate_kerberos_auth: ERROR:
>> krb5_pac_get_buffer:
>> Invalid argument
>> *** glibc detected ***
>> /root/squid-3.4.5/helpers/negotiate_auth/kerberos/negotiate_kerberos_auth:
>>
>> double free or corruption (fasttop): 0x0000000000615670 ***
>> ======= Backtrace: =========
>> /lib/libc.so.6(+0x71e16)[0x7ffff5fd0e16]
>> /lib/libc.so.6(cfree+0x6c)[0x7ffff5fd5b8c]
>> /usr/lib/libkrb5.so.3(krb5_free_data+0x12)[0x7ffff7939472]
>> /root/squid-3.4.5/helpers/negotiate_auth/kerberos/negotiate_kerberos_auth[0x4051a4]
>>
>> /root/squid-3.4.5/helpers/negotiate_auth/kerberos/negotiate_kerberos_auth[0x403265]
>>
>> /lib/libc.so.6(__libc_start_main+0xfd)[0x7ffff5f7dc8d]
>> /root/squid-3.4.5/helpers/negotiate_auth/kerberos/negotiate_kerberos_auth[0x4019c9]
>>
>> ======= Memory map: ========
>> 00400000-00408000 r-xp 00000000 08:12 443150
>> /root/squid-3.4.5/helpers/negotiate_auth/kerberos/negotiate_kerberos_auth
>>
>> 00607000-00608000 rw-p 00007000 08:12 443150
>> /root/squid-3.4.5/helpers/negotiate_auth/kerberos/negotiate_kerberos_auth
>>
>> 00608000-0062d000 rw-p 00000000 00:00 0
>> [heap]
>> 7ffff0000000-7ffff0021000 rw-p 00000000 00:00 0
>> 7ffff0021000-7ffff4000000 ---p 00000000 00:00 0
>> 7ffff5526000-7ffff5532000 r-xp 00000000 08:12 130570
>> /lib/libnss_files-2.11.3.so
>> 7ffff5532000-7ffff5731000 ---p 0000c000 08:12 130570
>> /lib/libnss_files-2.11.3.so
>> 7ffff5731000-7ffff5732000 r--p 0000b000 08:12 130570
>> /lib/libnss_files-2.11.3.so
>> 7ffff5732000-7ffff5733000 rw-p 0000c000 08:12 130570
>> /lib/libnss_files-2.11.3.so
>> 7ffff5733000-7ffff5739000 r-xp 00000000 08:12 501154
>> /usr/lib/libnfnetlink.so.0.2.0
>> 7ffff5739000-7ffff5938000 ---p 00006000 08:12 501154
>> /usr/lib/libnfnetlink.so.0.2.0
>> 7ffff5938000-7ffff5939000 rw-p 00005000 08:12 501154
>> /usr/lib/libnfnetlink.so.0.2.0
>> 7ffff5939000-7ffff5950000 r-xp 00000000 08:12 130795
>> /lib/libpthread-2.11.3.so
>> 7ffff5950000-7ffff5b4f000 ---p 00017000 08:12 130795
>> /lib/libpthread-2.11.3.so
>> 7ffff5b4f000-7ffff5b50000 r--p 00016000 08:12 130795
>> /lib/libpthread-2.11.3.so
>> 7ffff5b50000-7ffff5b51000 rw-p 00017000 08:12 130795
>> /lib/libpthread-2.11.3.so
>> 7ffff5b51000-7ffff5b55000 rw-p 00000000 00:00 0
>> 7ffff5b55000-7ffff5b57000 r-xp 00000000 08:12 130572
>> /lib/libkeyutils.so.1.3
>> 7ffff5b57000-7ffff5d56000 ---p 00002000 08:12 130572
>> /lib/libkeyutils.so.1.3
>> 7ffff5d56000-7ffff5d57000 rw-p 00001000 08:12 130572
>> /lib/libkeyutils.so.1.3
>> 7ffff5d57000-7ffff5d5e000 r-xp 00000000 08:12 497948
>> /usr/lib/libkrb5support.so.0.1
>> 7ffff5d5e000-7ffff5f5e000 ---p 00007000 08:12 497948
>> /usr/lib/libkrb5support.so.0.1
>> 7ffff5f5e000-7ffff5f5f000 rw-p 00007000 08:12 497948
>> /usr/lib/libkrb5support.so.0.1
>> 7ffff5f5f000-7ffff60b8000 r-xp 00000000 08:12 130805
>> /lib/libc-2.11.3.so
>> 7ffff60b8000-7ffff62b7000 ---p 00159000 08:12 130805
>> /lib/libc-2.11.3.so
>> 7ffff62b7000-7ffff62bb000 r--p 00158000 08:12 130805
>> /lib/libc-2.11.3.so
>> 7ffff62bb000-7ffff62bc000 rw-p 0015c000 08:12 130805
>> /lib/libc-2.11.3.so
>> 7ffff62bc000-7ffff62c1000 rw-p 00000000 00:00 0
>> 7ffff62c1000-7ffff62d7000 r-xp 00000000 08:12 130565
>> /lib/libgcc_s.so.1
>> 7ffff62d7000-7ffff64d6000 ---p 00016000 08:12 130565
>> /lib/libgcc_s.so.1
>> 7ffff64d6000-7ffff64d7000 rw-p 00015000 08:12 130565
>> /lib/libgcc_s.so.1
>> 7ffff64d7000-7ffff6557000 r-xp 00000000 08:12 130829
>> /lib/libm-2.11.3.so
>> 7ffff6557000-7ffff6757000 ---p 00080000 08:12 130829
>> /lib/libm-2.11.3.so
>> 7ffff6757000-7ffff6758000 r--p 00080000 08:12 130829
>> /lib/libm-2.11.3.so
>> 7ffff6758000-7ffff6759000 rw-p 00081000 08:12 130829
>> /lib/libm-2.11.3.so
>> 7ffff6759000-7ffff684f000 r-xp 00000000 08:12 504357
>> /usr/lib/libstdc++.so.6.0.13
>> 7ffff684f000-7ffff6a4f000 ---p 000f6000 08:12 504357
>> /usr/lib/libstdc++.so.6.0.13
>> 7ffff6a4f000-7ffff6a56000 r--p 000f6000 08:12 504357
>> /usr/lib/libstdc++.so.6.0.13
>> 7ffff6a56000-7ffff6a58000 rw-p 000fd000 08:12 504357
>> /usr/lib/libstdc++.so.6.0.13
>> 7ffff6a58000-7ffff6a6d000 rw-p 00000000 00:00 0
>> 7ffff6a6d000-7ffff6a6f000 r-xp 00000000 08:12 130828
>> /lib/libdl-2.11.3.so
>> 7ffff6a6f000-7ffff6c6f000 ---p 00002000 08:12 130828
>> /lib/libdl-2.11.3.so
>> 7ffff6c6f000-7ffff6c70000 r--p 00002000 08:12 130828
>> /lib/libdl-2.11.3.so
>> 7ffff6c70000-7ffff6c71000 rw-p 00003000 08:12 130828
>> /lib/libdl-2.11.3.so
>> 7ffff6c71000-7ffff6c78000 r-xp 00000000 08:12 130799
>> /lib/librt-2.11.3.so
>> Program received signal SIGABRT, Aborted.
>> 0x00007ffff5f911b5 in *__GI_raise (sig=<value optimized out>) at
>> ../nptl/sysdeps/unix/sysv/linux/raise.c:64
>> 64 ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or
>> directory.
>> in ../nptl/sysdeps/unix/sysv/linux/raise.c
>> Current language: auto
>> The current source language is "auto; currently c".
>> (gdb)
>>
>>
>> BR,
>> George
>>
>> On Thu, 19 Jun 2014 22:50:07 +0100, "Markus Moeller"
>> <huaraz_at_moeller.plus.com> wrote:
>>
>> > Hi George,
>> >
>> > Could you do the following please ?
>> >
>> > 1) Compile negotiate_kerberos_auth with debug (i.e. with -g )
>> > 2) kinit user_at_DOMAIN
>> > 3) export KRB5_KTNAME=<squid.keytab>
>> > 4) run negotiate_kerberos_auth_test <squid-fqdn>
>> > 5) run gdb negotiate_kerberos_auth
>> > 6) on prompt type run -d
>> > 7) input YR <token> The token comes from 2) above
>> > 8) when crashed type where in gdb
>> >
>> > send me the output please.
>> >
>> > Thank you
>> > Markus
>> >
>> > Example (without crash):
>> >
>> > > ./negotiate_kerberos_auth_test opensuse12.suse.home
>> > Token:
>> >
>> YIICpQYGKwYBBQUCoIICmTCCApWgDTALBgkqhkiG9xIBAgKiggKCBIICfmCCAnoGCSqGSIb3EgECAgEAboICaTCCAmWgAwIBBaEDAgEOogcDBQAAAAAAo4IBUWGCAU0wggFJoAMCAQWhCxsJU1VTRS5IT01FoicwJaADAgEDoR4wHBsESFRUUBsUb3BlbnN1c2UxMi5zdXNlLmhvbWWjggEKMIIBBqADAgEXoQMCAQSigfkEgfZ+FQJ4tzhRiu8g4pxP4R2immonX9OBVKcnbqjPhHBOyChp95aOairKjCP6j4sM9GaHms90TgQwY8XsF0P1BtpgBO32QU8GSRpUNTE2z35+pGCiT3ijb+enmNV00F8mR192/UbeaUVi/vtsSW/H2J3M8zxO2QSWyXNHP3bx9zL4yzfJrXSgXVG+VniFw5Y26DE+QuD/bh6y17WAZtlm53yQ0vrb+nv//mO/Log6LdC31x3w5r+BNAEz7KnXy2bMGOZqWsEEqYAHzIJSeX+ZQ8+wclHeHXReAVARbaibHHAoo1RGfKaXH6S30drB2OiIphoD0SqfQG6kgfowgfegAwIBEKKB7wSB7AKg3c836y3NZpaI2tj4iPCbJqIE/XE4VMmWv5eoOBP6ZOZ/X1k3RFvEdCjFA/QXQ44CSJEv7Fqha05ipAGtx9A1mSDFC7jfFH2VsHlRRGm7GoSJQXetrzTO1bfnhvyB3q2qwYglZTo28BPvCrWUSFTeld1E5kwFUsBrf787dsY80ZXlHzz4S451uiwrpMaqx/sKjXZ3KFoq
> spLnk+z2IqWTm292tqG+3WDnDhTVL/Y1uZwjZWIUIVIQ9xeWBD1Zhj4Z25437JibOzNfqGn7gGUB4fGzTE7hdWyw/Wq4keKzWmSn+DFsN5I8TuHJ
>
>> >
>> > > gdb ./negotiate_kerberos_auth
>> > GNU gdb (GDB) SUSE (7.5.1-2.1.1)
>> > Copyright (C) 2012 Free Software Foundation, Inc.
>> > License GPLv3+: GNU GPL version 3 or later
>> > <http://gnu.org/licenses/gpl.html>
>> > This is free software: you are free to change and redistribute it.
>> > There is NO WARRANTY, to the extent permitted by law. Type "show >
>> copying"
>> > and "show warranty" for details.
>> > This GDB was configured as "x86_64-suse-linux".
>> > For bug reporting instructions, please see:
>> > <http://www.gnu.org/software/gdb/bugs/>...
>> > Reading symbols from
>> >
>> /src/bazaar/squid-3-bzr/trunk-comp/helpers/negotiate_auth/kerberos/negotiate_kerberos_auth...done.
>> > (gdb) run -d
>> > Starting program:
>> >
>> /src/bazaar/squid-3-bzr/trunk-comp/helpers/negotiate_auth/kerberos/negotiate_kerberos_auth
>> > -d
>> > Missing separate debuginfo for /lib64/ld-linux-x86-64.so.2
>> > Try: zypper install -C
>> > "debuginfo(build-id)=0a23c4e8300b31613d800697d835b384e921407e"
>> > Missing separate debuginfo for /lib64/libcrypto.so.1.0.0
>> > Try: zypper install -C
>> > "debuginfo(build-id)=18a062c52abdd913e525fddb6fd147592888c314"
>> > Missing separate debuginfo for /lib64/libcom_err.so.2
>> > Try: zypper install -C
>> > "debuginfo(build-id)=15ec626a4c628421c9c693fa21175a817f7f8976"
>> > Missing separate debuginfo for /lib64/libcrypt.so.1
>> > Try: zypper install -C
>> > "debuginfo(build-id)=9ddd2ea1e6da3d0754648ecb0bf8b617d827f903"
>> > Missing separate debuginfo for /lib64/libnsl.so.1
>> > Try: zypper install -C
>> > "debuginfo(build-id)=977d93583313f4913f08744dcc567b2ea95b5b58"
>> > Missing separate debuginfo for /lib64/libresolv.so.2
>> > Try: zypper install -C
>> > "debuginfo(build-id)=5abb77d6cb67d9e36b97d842daba249e71b499d7"
>> > Missing separate debuginfo for /lib64/libcap.so.2
>> > Try: zypper install -C
>> > "debuginfo(build-id)=54340dea9b3278365fbf8d9978a1cad518758975"
>> > Missing separate debuginfo for /lib64/librt.so.1
>> > Try: zypper install -C
>> > "debuginfo(build-id)=c91b3d0735b49e2ccf493b8c91612978c783a732"
>> > Missing separate debuginfo for /lib64/libdl.so.2
>> > Try: zypper install -C
>> > "debuginfo(build-id)=da368634ea211229f45d2f8d32e7da61800b4c75"
>> > Missing separate debuginfo for /usr/lib64/libstdc++.so.6
>> > Try: zypper install -C
>> > "debuginfo(build-id)=babb0ba2913558a7b90bb6d23750a6a1885bfb59"
>> > Missing separate debuginfo for /lib64/libm.so.6
>> > Try: zypper install -C
>> > "debuginfo(build-id)=24fba01931c773fd5b4688b34c4acde47ea77cb9"
>> > Missing separate debuginfo for /lib64/libgcc_s.so.1
>> > Try: zypper install -C
>> > "debuginfo(build-id)=79056b80865c15deabba7b20155ea27c76d91bf1"
>> > Missing separate debuginfo for /lib64/libpthread.so.0
>> > Try: zypper install -C
>> > "debuginfo(build-id)=ef5f5dbcb2398c608fef7884e1bfb65be3b5f0ef"
>> > [Thread debugging using libthread_db enabled]
>> > Using host libthread_db library "/lib64/libthread_db.so.1".
>> > Missing separate debuginfo for /lib64/libc.so.6
>> > Try: zypper install -C
>> > "debuginfo(build-id)=837f2459b5923578eb82a4b75b1f98a5faa08532"
>> > Missing separate debuginfo for /lib64/libz.so.1
>> > Try: zypper install -C
>> > "debuginfo(build-id)=bef211df25174b1ba44958f0e7f8e301d59c8de5"
>> > negotiate_kerberos_auth.cc(212): pid=20522 :2014/06/19 22:47:52|
>> > negotiate_kerberos_auth: INFO: Starting version 3.0.4sq
>> > YR
>> >
>> YIICpQYGKwYBBQUCoIICmTCCApWgDTALBgkqhkiG9xIBAgKiggKCBIICfmCCAnoGCSqGSIb3EgECAgEAboICaTCCAmWgAwIBBaEDAgEOogcDBQAAAAAAo4IBUWGCAU0wggFJoAMCAQWhCxsJU1VTRS5IT01FoicwJaADAgEDoR4wHBsESFRUUBsUb3BlbnN1c2UxMi5zdXNlLmhvbWWjggEKMIIBBqADAgEXoQMCAQSigfkEgfZ+FQJ4tzhRiu8g4pxP4R2immonX9OBVKcnbqjPhHBOyChp95aOairKjCP6j4sM9GaHms90TgQwY8XsF0P1BtpgBO32QU8GSRpUNTE2z35+pGCiT3ijb+enmNV00F8mR192/UbeaUVi/vtsSW/H2J3M8zxO2QSWyXNHP3bx9zL4yzfJrXSgXVG+VniFw5Y26DE+QuD/bh6y17WAZtlm53yQ0vrb+nv//mO/Log6LdC31x3w5r+BNAEz7KnXy2bMGOZqWsEEqYAHzIJSeX+ZQ8+wclHeHXReAVARbaibHHAoo1RGfKaXH6S30drB2OiIphoD0SqfQG6kgfowgfegAwIBEKKB7wSB7AKg3c836y3NZpaI2tj4iPCbJqIE/XE4VMmWv5eoOBP6ZOZ/X1k3RFvEdCjFA/QXQ44CSJEv7Fqha05ipAGtx9A1mSDFC7jfFH2VsHlRRGm7GoSJQXetrzTO1bfnhvyB3q2qwYglZTo28BPvCrWUSFTeld1E5kwFUsBrf787dsY80ZXlHzz4S451uiwrpMaqx/sKjXZ3KFoq
> spLnk+z2IqWTm292tqG+3WDnDhTVL/Y1uZwjZWIUIVIQ9xeWBD1Zhj4Z25437JibOzNfqGn7gGUB4fGzTE7hdWyw/Wq4keKzWmSn+DFsN5I8TuHJ
>
>> > negotiate_kerberos_auth.cc(258): pid=20522 :2014/06/19 22:48:05|
>> > negotiate_kerberos_auth: DEBUG: Got 'YR
>> >
>> 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
> spLnk+z2IqWTm292tqG+3WDnDhTVL/Y1uZwjZWIUIVIQ9xeWBD1Zhj4Z25437JibOzNfqGn7gGUB4fGzTE7hdWyw/Wq4keKzWmSn+DFsN5I8TuHJ'
>
>> > from squid (length: 911).
>> > negotiate_kerberos_auth.cc(311): pid=20522 :2014/06/19 22:48:05|
>> > negotiate_kerberos_auth: DEBUG: Decode
>> >
>> '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
> qspLnk+z2IqWTm292tqG+3WDnDhTVL/Y1uZwjZWIUIVIQ9xeWBD1Zhj4Z25437JibOzNfqGn7gGUB4fGzTE7hdWyw/Wq4keKzWmSn+DFsN5I8TuHJ'
>
>> > (decoded length: 681).
>> > negotiate_kerberos_auth.cc(128): pid=20522 :2014/06/19 22:48:05|
>> > negotiate_kerberos_auth: ERROR:
>> > gsskrb5_extract_authz_data_from_sec_context() failed: Miscellaneous
>> > failure
>> > (see text). Ticket have not authorization data of type 128
>> > AF oRQwEqADCgEAoQsGCSqGSIb3EgECAg== markus_at_SUSE.HOME
>> > negotiate_kerberos_auth.cc(431): pid=20522 :2014/06/19 22:48:05|
>> > negotiate_kerberos_auth: DEBUG: AF oRQwEqADCgEAoQsGCSqGSIb3EgECAg==
>> > markus_at_SUSE.HOME
>> > QQ
>> > negotiate_kerberos_auth.cc(258): pid=20522 :2014/06/19 22:48:08|
>> > negotiate_kerberos_auth: DEBUG: Got 'QQ' from squid (length: 2).
>> > BH quit command
>> > [Inferior 1 (process 20522) exited normally]
>> > (gdb) quit
>> >
>> >
>> > "George Billios" wrote in message
>> > news:E1Wxb2r-0002U0-PB_at_rmm6prod02.runbox.com...
>> >
>> >
>> >
>> > On Thu, 19 Jun 2014 23:21:45 +1200, Amos Jeffries
>> <squid3_at_treenet.co.nz>
>> > wrote:
>> >
>> > > On 19/06/2014 6:40 p.m., George Billios wrote:
>> > > > Hi,
>> > > >
>> > > > I'm trying to upgrade from 3.3.8 to 3.4.5 (3.4.x in general),
>> > > > compile
>> > > > squid with the same options (that are still valid in 3.4.x) and
>> use
>> > > > negotiate authentication, but every time negotiate_kerberos_auth
>> > > > crashes
>> > > > with the following:
>> > > >
>> > > >
>> > > > 2014/06/18 23:06:20| negotiate_wrapper: Error reading Kerberos
>> > > > helper
>> > > > response
>> > > > 2014/06/18 23:06:20 kid1| WARNING: negotiateauthenticator #Hlpr0
>> > > > exited
>> > > > 2014/06/18 23:06:21| negotiate_kerberos_auth: ERROR:
>> > > > krb5_pac_get_buffer: Invalid argument
>> > > > *** glibc detected *** /usr/libexec/negotiate_kerberos_auth:
>> double
>> > > > free
>> > > > or corruption (fasttop): 0x000000000159af00 ***
>> > > > ======= Backtrace: =========
>> > > > /lib/libc.so.6(+0x71e16)[0x7f6bf3b3ae16]
>> > > > /lib/libc.so.6(cfree+0x6c)[0x7f6bf3b3fb8c]
>> > > > /usr/lib/libkrb5.so.3(krb5_free_data+0x12)[0x7f6bf54a3472]
>> > > > /usr/libexec/negotiate_kerberos_auth[0x4044e9]
>> > > > /usr/libexec/negotiate_kerberos_auth[0x40319c]
>> > > > /lib/libc.so.6(__libc_start_main+0xfd)[0x7f6bf3ae7c8d]
>> > > > /usr/libexec/negotiate_kerberos_auth[0x4018b9]
>> > >
>> > >
>> > > Do you have a trace that shows what the helper was doing?
>> > >
>> > > From that trace it looks like simply calling the main() function and
>> > > linking to the library crashed it. None of that is Squid code,
>> all OS
>> > > code, so ... ?!
>> > >
>> > > Amos
>> >
>> >
>> > I don't have a trace but I can probably enable all the debug
>> options and
>> > get
>> > one.
>> >
>> > Even if this an OS issue what can trigger it since the helper from
>> 3.3.8
>> > works but the one from 3.4.x doesn't with the same libraries, same
>> > compile
>> > options etc ? That is why I'm asking if something fundamental
>> changed -
>> > which from a quick look at the helper code I can say something has
>> but I
>> > don't have the programming skills to understand what exactly and
>> how it
>> > could create this issue.
>> >
>> > In any case I'll come back with more debug info.
>
>
>
>
>
Received on Sun Jun 22 2014 - 19:03:20 MDT